Security Lab / Threat Hunting

In Progress

Security OnionSIEMThreat HuntingBlue TeamDetection Engineering

Overview

A dedicated security lab running Security Onion for network security monitoring, IDS/IPS, and SIEM capabilities. Used to practice threat hunting against simulated attack scenarios in an isolated VLAN.

Lab Setup

Security Onion deployed on Proxmox, configured to monitor traffic across the security lab VLAN. Attacker and victim VMs are isolated from the rest of the homelab network.

Planned Scenarios

Mock threat hunting exercises including lateral movement detection, C2 traffic identification, credential dumping alerts, and log analysis workflows.