socanalyst-project

🛡️ Splunk SIEM — I am build SOC Analyst Portfolio project ya lab | 8 Dashboards with step-by-step lab guides covering SSH brute-force, Web Traffic, DNS, FTP, SMTP, DHCP, Tunnel & AWS GuardDuty cloud threat detection. Includes SPL queries, importable XML, 8,701 sample events & MITRE ATT&CK mapping.

A hands-on SOC/XDR laboratory built using Wazuh, Ubuntu, Windows, and Sysmon. The project covers Wazuh SIEM deployment, Windows agent enrollment, Windows Event Log monitoring, Sysmon integration, Security Configuration Assessment (SCA), endpoint monitoring, detection engineering, threat hunting, and incident response. Future phases include vuln

Hi, I'm Munnaza 👋

Enterprise Cyber Threat Intelligence Command Center powered by Flask, parallel port scanning, dual IP reputation engines, and Chart.js radar analytics.