Security Labs

SOC analysis and security investigation labs

Practical cybersecurity case studies documenting simulated alert triage, SIEM investigation, evidence correlation, and incident writeups.

Simulated SOC Investigation

Phishing Alert Investigation Using Splunk

Investigated a simulated phishing alert in Splunk, correlated email and firewall telemetry, validated business context, and documented a False Positive disposition.

Splunk SIEM Phishing Analysis Alert Triage