Documentation
Homelab architecture, playbooks, and SOC reference material.
-
Home SOC Lab — Rebuild (October 2026)
PublishedLab architecture, validated work and next steps: two Proxmox hosts, Active Directory and Wazuh.
Oct 9, 2026
#homelab#soc#network#vlan#proxmox#pfsense#wazuh -
Phishing Email Analysis Report
PublishedPhishing email analysis report for the homelab environment.
May 31, 2026
#phishing#email-analysis -
SOC Playbook Template — Generic Incident Response
TemplateGeneric incident response playbook template following NIST SP 800-61 and PICERL frameworks.
Apr 25, 2026
#playbook#incident-response#soc#nist#picerl -
L1 SOC Analyst — Alert Response Workflow
ReferenceDay-to-day alert response workflow for a Tier 1 SOC analyst, from alert reception to close or hand-off.
Apr 25, 2026
#soc#l1-analyst#triage#workflow#incident-response -
Home SOC Lab — First version (archive)
PublishedFirst lab archive: a flat network behind pfSense and an RDP detection exercise.
Apr 19, 2026
#homelab#soc#wazuh#proxmox#pfsense -
Suspicious Invoice Email - Triage #000 (Fake template)
TemplateInvestigation of a phishing-style invoice email targeting finance users with a malicious redirect link.
Apr 16, 2026
#phishing#email-analysis#template