Pinned Loading

1. SOC-Lab-RDP-Attack-Detection-with-Sysmon-and-Splunk SOC-Lab-RDP-Attack-Detection-with-Sysmon-and-Splunk Public

   Simulated full attack lifecycle in a SOC homelab: RDP brute-force, privilege persistence, PowerShell abuse, containment, and custom Splunk detection engineering using Sysmon telemetry.

2. TCP-IP-attack-lab TCP-IP-attack-lab Public

   Hands-on TCP/IP security lab demonstrating SYN flooding, TCP reset attacks, session hijacking, and reverse shell exploitation using Python and Scapy.

   Python

3. ransomware-heuristic-analyzer ransomware-heuristic-analyzer Public

   Static ransomware detection using heuristic scoring and binary analysis (entropy, APIs, strings)

   Python

4. aws-security-labs aws-security-labs Public

   Hands-on AWS security labs covering IAM access control, VPC network security, and data encryption using KMS.

5. phishing-investigation-case-studies phishing-investigation-case-studies Public

   Two SOC phishing investigations — email authentication forensics (SPF/DMARC/WHOIS) and phishing kit infrastructure hunting.

6. soc-incident-phishing-to-exfiltration soc-incident-phishing-to-exfiltration Public

   SOC alert triage → full incident investigation: phishing email traced to financial data exfiltration via DNS tunneling.