Project 1
Objective:
Set up a fully operational Security Operations Center (SOC) in a home lab environment to simulate real-world cybersecurity operations and enhance practical skills.
Virtual SOC Environment
What I Did:
​
-
Virtualization Setup:
Installed and configured VirtualBox to host virtual machines for Windows and Linux, creating an isolated environment for experimentation. -
SIEM Integration:
Configured Splunk (or ELK Stack) to collect, index, and analyze system logs from the virtual machines. Set up dashboards for real-time monitoring and analysis. -
Attack Simulation:
Simulated various cyberattacks, including port scanning with Nmap, and captured the activity using the SIEM tool. -
Incident Detection and Analysis:
Detected and analyzed the simulated attacks using log data, demonstrating the ability to identify potential threats and understand their impact.
​
Key Skills Demonstrated:
-
Security Information and Event Management (SIEM) setup and usage
-
Log collection, indexing, and analysis
-
Simulating and detecting cybersecurity incidents
-
Hands-on experience with Splunk (or ELK Stack), VirtualBox, and networking tools like Nmap
​
Outcome:
Successfully built a functional SOC environment to gain practical experience in monitoring, detecting, and analyzing cybersecurity incidents. This project enhanced my skills in log analysis, incident detection, and overall SOC operations, bridging the gap between theory and real-world application.