I architected a multi-node security monitoring lab using Ubuntu Server, Wazuh SIEM, and Nessus to monitor virtualized endpoints. I configured Wazuh agents to centralize system logs and file integrity monitoring.
In a privilege escalation analysis project, I examined system logs, process trees, and host-level indicators of compromise to investigate exploit attempts. I documented incidents using the MITRE ATT&CK framework.
In practical penetration-testing labs, I used network discovery and service fingerprinting to assess vulnerable systems, then analyzed captured traffic with Wireshark to identify unencrypted credential leaks and malicious payload delivery.
