blue-team-project

Digital forensics simulator for training CERT and DFIR analysts!

Buffer Overflow Analysis & Remediation Framework

Python-based educational cybersecurity tool for password strength analysis and text encryption (Caesar, XOR, AES). Ethical use only.

From initial access to impact, this investigation report details my findings, methods, and lessons learned as a SOC Analyst during a mock incident-response investigation scoped for educational purposes based on the "Scanned Document 468" CTF by jirosgyros from https://github.com/jirosgyros/soc-ctf-scanned-document-468

A self-built SOC home lab: Wazuh manager + Sysmon-instrumented Windows endpoint + Kali attacker, all on an isolated VirtualBox network. Documents installation, a real RDP brute-force attack via Hydra, and its detection in Wazuh with MITRE ATT&CK technique mapping.