This report addresses the design of an Intelligent Security Console equipped with Intrusion Detection Message Exchange Format (IDMEF) Objects' data mining for the DARPA Ultra*Log Program. It supports the scalable Monitoring and Response security console architecture. The Data Mining capability requires scalability of message management, that has been ensured through incorporation of an XML Database (eXist). Security console is used to query for IDMEF alerts generated across the society by ...