Lab is active

Cyber Home Lab
Blue Team Journal

Documenting my hands-on journey in building a real-world SOC environment — SIEM setup, log analysis, threat detection, and everything in between.

01
Posts
2
VMs Running
∞
Things to learn
→ View Projects GitHub Profile
// featured work

Cybersecurity Projects

HomeLab-V2 — SOC Detection Engineering

Building an isolated VMware cybersecurity environment for Active Directory, Windows event logging, Wazuh SIEM, and hands-on detection validation. Phase 1 focuses on VMnet1 host-only networking, static IPv4/DNS configuration, and connectivity testing.

Tools: VMware Workstation · Windows Server 2022 · PowerShell · Ubuntu · Kali Linux · Wazuh (planned)

View HomeLab-V2 on GitHub →
// latest writeups

Lab Posts

Building a Home SIEM: Elasticsearch & Kibana Setup
How I deployed Elasticsearch and Kibana on an Ubuntu VM, fought through authentication errors, reset credentials, and got the full stack running on my home lab network.
Read more →
// tools & tech

Lab Stack

🖥️
VMware
Hypervisor running all lab VMs on dedicated SSD
🐧
Ubuntu Server
SIEM host — soc-lab / siem-server VM
🪟
Windows Server
Target machine with Sysmon64 for event logging
📊
Elasticsearch
Search & analytics engine at the core of the SIEM
📈
Kibana
Dashboard & visualization for log analysis
🔍
Sysmon
Windows telemetry — process, network, file events
// who is this

About

I'm souley393, a CompTIA Security+ certified learner with an associate degree in Computer Science, building a home SOC lab from the ground up. This blog documents the real process — the configs that break, the errors that don't make sense, and the moments when things finally click.

My focus is blue team — log analysis, SIEM engineering, threat detection, and security monitoring. Everything here is hands-on, self-built, and learned the hard way.

No fluff. Just lab notes.