SOC Detection Lab
Built a small SOC lab using Windows, Kali Linux, and Splunk SIEM to collect logs, detect suspicious activity, and analyze security alerts.
- Windows endpoint monitoring
- Splunk SIEM alerts
- Failed login detection
- Basic attack simulation