IR-2026-001
Medium
Linux Privilege Escalation
Investigated suspicious account changes, privilege elevation, and Linux authentication activity detected by Wazuh in a monitored lab environment.
CE Security Monitoring
SOC Analyst Projects
Incident Investigations & Home Lab Case Files
A collection of hands-on cybersecurity projects, home lab investigations, SIEM alerts, incident reports, and technical documentation focused on detection, analysis, and response.
Dashboard
Investigation Overview
2
Closed Incidents
Wazuh
SIEM Platform
2
MITRE Mapped Cases
Lab
VirtualBox Environment
Case Files
Featured SOC Investigations
IR-2026-002
Medium
SSH Brute Force Detection
Investigated repeated failed SSH authentication attempts from a Kali Linux attacker against an Ubuntu Server monitored through Wazuh SIEM.
Home Lab Projects
Security Lab Development
LAB-001
Active
Wazuh SIEM Home Lab
Built a defensive monitoring environment using Wazuh Manager, Ubuntu endpoints, Kali Linux, and VirtualBox networking.
Explore Home Lab →
LAB-002
Active
Metasploitable2 Attack Lab
Performed reconnaissance and exploitation against vulnerable services in a controlled lab environment.
View Lab Details →