Objectives
- Study network segmentation and intrusion detection
- Practice endpoint monitoring and log aggregation
- Evaluate defensive tooling against realistic traffic
Implementation Highlights
- Segmented lab network with firewall and IDS coverage
- Endpoint detection and log aggregation pipeline
- Detection-alert triage and response workflow
Technologies
pfSenseWazuhSuricataLinuxMITRE ATT&CK
Outcomes
- Segmented lab network with firewall and IDS coverage
- Endpoint detection and log aggregation pipeline
- Detection-alert triage and response workflow