This project demonstrates hands-on experience relevant to a SOC Analyst role
🧱 Lab Architecture Host System
- 8 CPU cores
- 32 GB RAM
Virtual Machines
- Ubuntu Server – Wazuh SIEM + Suricata
- Windows 11 – Endpoint telemetry and attack simulation
- Kali Linux – Adversary simulation
🔧 Tools Used
- Wazuh (SIEM, log analysis, alerting)
- Suricata (Network IDS)
- Windows Event Logs & Sysmon
🔍 What This Lab Demonstrates
- SOC alert monitoring and triage
- Endpoint and network log analysis
- Attack simulation and detection validation
- Incident documentation and reporting
- Mapping attacker behavior to MITRE ATT&CK