I built an Active Directory and Enterprise Network Lab with a domain controller, organizational units, security groups, and user accounts. I configured Group Policies and least-privilege permissions, then resolved simulated access, lockout, and permissions tickets in Jira Service Management and ServiceNow.
In my AD to SIEM Detection Lab, I forwarded Windows Event Logs to Wazuh and wrote alerts for failed-login spikes, account lockouts, and privileged group changes. I also synced Active Directory accounts to Microsoft 365 with Microsoft Entra Connect and enforced MFA and Conditional Access policies.
