soc-lab

🔐 Hands-on SOC lab - 12 tools (OpenSearch, Suricata, Zeek, MISP, Caldera, Velociraptor + AI agents) via Docker Compose. MITRE ATT&CK v14. Free

Controlled SOC lab for deterministic detection engineering, analyst workflow training, and evaluation.

A set of Windows tools designed for SOC labs and controlled test environments providing automated TLS key logging setup for web encrypted traffic analysis and enabling or disabling of 16 Windows Defender components (9 functional protection components and 7 services/drivers) to support malware research, detection engineering, and Blue Team training.

SOC Lab Project - AWS, Elastic, TheHive, MISP, Cortex, Shuffle

Enterprise Security Operations Lab featuring Active Directory, Windows Security Monitoring, Windows Event Forwarding (WEF), Microsoft Defender, Splunk SIEM, Threat Detection, Alerting, and SOC Use Cases.

SOC monitoring lab built using Graylog, OpenSearch, and Ubuntu. Includes log ingestion, detection engineering, alerting, and dashboards.

Professional High-Concurrency Port Scanner & Vulnerability Auditor | Engineered for SOC & Wazuh SIEM Integration.

A Docker-based lab for practicing with Splunk

A lightweight Home SOC Lab optimized for low-resource devices. Featuring Suricata IDS/IPS, Filebeat on Parrot OS (VM), and Elastic Stack on Docker/WSL2.

ICMP Protocol Analysis Lab using Wireshark – A hands-on cybersecurity lab focused on capturing and analyzing ICMP Echo Request and Reply packets, interpreting protocol fields, and applying Wireshark filters for investigation.

Security operation center lab

Conducted separate network-level and log-based attack simulations to analyze detection capabilities across different sources

Windows endpoint telemetry and threat detection lab using Sysmon to identify obfuscated PowerShell commands.

Description SOC investigation lab integrating pfSense, Cowrie, Suricata, Splunk and MISP, with Python/SQLite log buffering, threat intelligence correlation and tested outage recovery.

Lightweight SOC Home Lab for Low-End Computers & PCs – Living Narrative Campaign Engine

Home lab de ciberseguridad para practicar detección y respuesta a incidentes. Kali Linux + Ubuntu Server, documentado paso a paso.

A hands-on 4-VM SOC lab using Wazuh, Suricata, Snort, Nmap, Kali Linux, Ubuntu Server, and Windows 10 for security monitoring and Nmap SYN-scan detection.

Building a hands-on Home AD Lab and experimenting with SOC monitoring.

Security Onion