Project plan
This project has not been implemented. The setup and tasks below describe the proposed work.
Objective and scope
Create an owned, controlled learning environment for collecting host and network logs, investigating alerts, and practicing security triage.
Proposed environment
Proposed scope: isolated virtual machines on a segmented home network, a log-collection platform, and controlled test activity. The listed tools are candidates from the original plan; their integration has not been demonstrated.
Limits and next steps
Hardware procurement, deployment, data ingestion, and detection validation are not complete. No operational SIEM, detection coverage, measured performance, or incident-response outcome is claimed.
Authorized scope
Any eventual exercises will use owned or explicitly authorized systems and synthetic activity. The planned lab does not provide authorization to test third-party systems.
Proposed tools
Wazuh · pfSense · Proxmox · Elastic