Projects

Windows Active Directory Threat Detection Lab
(In Progress)

September 2026

An image of the Active Directory threat detection project

Building an Active Directory environment with a Windows Server domain controller, a domain-joined Windows 11 client, and an Ubuntu-based Wazuh SIEM to simulate real-world attack techniques in a controlled lab. Using Nmap, Hydra, and PowerShell, carried out network reconnaissance, an RDP brute-force attack against a domain account, and execution of an encoded PowerShell payload, then used Wazuh to collect and analyze the resulting logs.

View Technical Write-Up

In Progress

SIEM Implementation and Threat Detection Lab

March 2026

An image of the Virtual Machines running

Deployed Wazuh as a centralized security monitoring solution to detect and respond to threats across multiple virtual machines. This project simulates a real-world Security Operations Center (SOC) environment, addressing the challenge of monitoring security events at scale.

View Technical Write-Up View Process Video

VirtualBox Wazuh Windows 11 Ubuntu Server Kali Linux VSCode nmap Hydra PowerShell Python Networking Firewall

Windows Active Directory Threat Detection Lab(In Progress)

SIEM Implementation and Threat Detection Lab

Windows Active Directory Threat Detection Lab
(In Progress)