SOC analyst home lab built on ELK Stack — SSH/RDP brute force detection, Mythic C2 attack simulation, Apollo agent hunting, Elastic Defend EDR, and osTicket alert-to-ticket pipeline.

Production-grade red team infrastructure as code. Multi-node WireGuard mesh with NixOS, Alpine, and Arch. Mythic C2, automated threat scoring, nftables-based IPS.