SOC Home Lab
Read-only Wazuh MCP plus sanitized Wazuh → Shuffle → DFIR-IRIS alert automation, alongside Proxmox, pfSense, Windows and secure access.
Explore lab →SECURITY OPERATIONS • INCIDENT RESPONSE • THREAT HUNTING
I investigate complex security events, correlate endpoint and network telemetry, lead escalations, and turn technical evidence into clear containment and remediation decisions.
EXPLORE PORTFOLIO
The landing page stays concise. Each area has its own dedicated page with deeper technical information.
Professional approach, SOC responsibilities and incident-response mindset.
Role progression, senior responsibilities and onsite security operations.
SIEM, SOAR, EDR/XDR, network security and operational capabilities.
Sanitized incident investigations with detection, analysis, response and MITRE ATT&CK mapping.
Proxmox, Wazuh, Shuffle, DFIR-IRIS, pfSense, Windows AD and secure-access infrastructure.
Email, LinkedIn, GitHub and current opportunity interests.
Read-only Wazuh MCP plus sanitized Wazuh → Shuffle → DFIR-IRIS alert automation, alongside Proxmox, pfSense, Windows and secure access.
Explore lab →PowerShell and renamed tunneling utility activity correlated to remote port-forwarding behavior.
Read investigation →