Popular repositories Loading

1. network-security-monitoring-lab network-security-monitoring-lab Public

   3-layer NSM (Network Security Monitoring) stack : TShark + Zeek + Suricata with custom IDS rules

2. pfSense-Suricata-IPS-lab pfSense-Suricata-IPS-lab Public

   pfSense firewall with geo-blocking (pfBlockerNG) and Suricata in active IPS mode — real-time packet dropping lab

3. Windows-10-Endpoint-Hardening Windows-10-Endpoint-Hardening Public

   Windows 10 endpoint hardening with CIS Benchmarks, Group Policy, Sysmon forensic logging, and advanced audit policies

4. linux-hardening-lab linux-hardening-lab Public

   Ubuntu 22.04 server hardening with CIS Benchmark Level 2, auditd, UFW, fail2ban, and SSH key authentication

5. soc-automation-lab soc-automation-lab Public

   Automated SOC pipeline — Wazuh detects Mimikatz, Shuffle orchestrates VirusTotal enrichment, TheHive case creation, and email alert

6. Active-Directory-Lab Active-Directory-Lab Public

   Active Directory attack detection with Splunk SIEM — RDP brute force detection, Event ID 4624 correlation, and SOAR automation via Shuffle and Slack