01
Home SIEM lab
Endpoint monitoring for a small Windows domain
A virtualised Windows domain, with a Windows Server 2022 Core domain controller and a Windows 11 Enterprise client, sending Sysmon telemetry to Wazuh. Documented runbooks and incident reports with step by step build guides.
In progress
Setup Books, Runbooks, Detections
