Pinned Loading

1. Darwin-SOC-LimaCharlie-EDR-PowerShell-Detection-and-Investigation-Lab Darwin-SOC-LimaCharlie-EDR-PowerShell-Detection-and-Investigation-Lab Public

   Hands-on SOC lab using LimaCharlie EDR to deploy a Windows sensor, monitor PowerShell activity, analyze process telemetry, create a custom D&R rule, generate an alert, and investigate full detectio…

2. Darwin--SOC-Elastic-Alert-Triage-Investigation-Lab Darwin--SOC-Elastic-Alert-Triage-Investigation-Lab Public

   This project demonstrates a complete Security Operations Center (SOC) investigation using Elastic Security (Kibana) within the TryHackMe **Alert Triage With Elastic** lab.

3. Darwin-SOC-LetsDefend-Monitoring-Incident-Response Darwin-SOC-LetsDefend-Monitoring-Incident-Response Public

   Completed the LetsDefend Monitoring Incident Response lab by monitoring security alerts, investigating a critical web attack, creating an incident case, analyzing malicious traffic, documenting IOC…

4. Darwin-Wazuh-SOC-Lab Darwin-Wazuh-SOC-Lab Public

   Built and configured a complete Wazuh SIEM lab using Ubuntu Server and Windows 11. Configured Wazuh Manager, Indexer, Dashboard, and Windows Agent for real-time endpoint monitoring, log analysis, t…

5. Darwin-SOC-Microsoft-Defender-XDR-Hunting-Lab Darwin-SOC-Microsoft-Defender-XDR-Hunting-Lab Public

   Hands-on Microsoft Defender for Endpoint lab demonstrating endpoint onboarding, threat detection, attack surface reduction, antivirus management, vulnerability assessment, device inventory, and inc…

6. Darwin-SOC-AI-Incident-Timeline-Shift-Handoff-Generator Darwin-SOC-AI-Incident-Timeline-Shift-Handoff-Generator Public

   SOC Tier 1 Streamlit application that converts Hayabusa Windows event data into a grouped incident timeline, priority investigation queue, and downloadable shift-handoff report for analyst review.