Projects
Lab builds and hands-on work from my SIWES training and independent study. Each one is documented as I go, the same way I'd document incident work in a real Security Operation Center.
Wazuh SIEM Home Lab
A self-hosted Wazuh manager with agents deployed across Linux and Windows endpoints, configured for centralized agent management via agent.conf, file integrity monitoring (syscheck) on Windows hosts, and Slack and VirusTotal integrations for real-time alerting and threat intel enrichment.
Splunk Log Analysis Lab
A home lab running Splunk Enterprise on Ubuntu Server with a Windows 10 universal forwarder, used to practice SPL queries for logon event analysis. Includes a synthetic log dataset built with embedded attack patterns and a written analysis of Conti and Mirai malware behavior.
Lumma Stealer Traffic Analysis
A packet capture exercise using a publicly available Lumma Stealer sample from malware-traffic-analysis.net, examined in Wireshark to trace the infection chain and document indicators of compromise.
AWS Cloud Security Labs
Hands-on work across core AWS services: VPC design with subnetting and route tables, IAM permission boundaries, and EC2 troubleshooting, including recovering SSH access to a Debian instance with a lost key pair via an EBS volume swap.