A hands-on cybersecurity lab where I test security concepts, controls, network behaviour, telemetry and detection techniques in a controlled environment. The goal is to connect security theory with practical implementation, observation and analysis.

Current Lab Environment

My lab combines network security, endpoint monitoring, threat detection and incident investigation technologies to explore how security controls operate and how security events can be observed across an environment.

Core Technologies

• pfSense — firewalling and network segmentation
• Zeek — network security monitoring and telemetry
• Suricata — network intrusion detection
• Wazuh — endpoint monitoring and security analytics
• Splunk — SIEM and security investigation
• Windows Server & Active Directory — identity and enterprise services
• Windows endpoints — endpoint telemetry and testing
• Linux endpoints — endpoint telemetry and testing
• Kali Linux — controlled security testing and adversary simulation
• Velociraptor — endpoint visibility and DFIR
• Tsurugi / FLARE-VM — investigation and malware-analysis tooling

Lab Work

Individual experiments and investigations will be documented as the lab develops, with technical evidence, configurations and supporting material published where appropriate.