Projects
Security Monitoring & Hardening Lab
Tools Used: VirtualBox, Ubuntu, Windows 10, Splunk Enterprise, UFW, ClamAV
Created a cybersecurity home lab to simulate real-world defensive operations and blue team tasks. This project was designed to reinforce key concepts from the CompTIA Security+ exam and provide hands-on experience with system monitoring, alerting, and hardening.
- ✅ Set up a virtual environment using VirtualBox with Ubuntu and Windows 10 VMs
- ✅ Installed and configured Splunk Enterprise as a SIEM platform on the Ubuntu VM
- ✅ Forwarded logs from the Windows machine to Splunk for centralized log monitoring
- ✅ Simulated brute-force login failures on Windows to test alert generation in Splunk
- ✅ Wrote and tested SPL (Search Processing Language) queries to detect suspicious behavior
- ✅ Installed and configured UFW (Uncomplicated Firewall) on the Linux machine to restrict traffic
- ✅ Installed and ran ClamAV to scan for malware on the Ubuntu VM
SIEM Dashboard & Detection Logs
This project helped solidify my understanding of SIEM concepts, log analysis, threat detection, and basic system hardening. It also gave me hands-on experience with security tooling that is foundational for SOC analyst roles.