Defensive Operations
Blue Team / Defensive Security
A collection of hands-on defensive security work, from SIEM detection and endpoint monitoring to hardening, network visibility, and SOC workflow design.
Blue Team / Defensive Security
8 projects
1
Build a SIEM dashboard to monitor failed login attempts using Wazuh custom rules and alerts.
Detection engineering · Wazuh · authentication monitoring
↗
2
Detect and investigate brute-force attacks through security log analysis.
Threat detection · log analysis · investigation
↗
3
Develop endpoint detection rules based on CrowdStrike and Microsoft Defender concepts.
Endpoint security · EDR concepts · detection logic
↗
4
Harden Linux servers according to CIS Benchmark recommendations.
System hardening · Linux · CIS controls
↗
5
Analyze and monitor network traffic using Wireshark.
Network visibility · packet analysis · troubleshooting
↗
6
Develop a SOC alert-triage workflow and checklist using Wazuh.
Alert triage · SOC workflow · incident response
↗
7
Implement File Integrity Monitoring (FIM) to detect unauthorized file changes.
Integrity monitoring · host security · change detection
↗
8
Configure and manage basic firewall rules using iptables, OpenWrt, and IPFire.
Firewalling · network security · Linux routing
↗