ffFarhan FathahCybersecurity portfolio
Back to portfolio
SOC PLAYGROUND / PERSONAL LAB

Follow the signal.
Understand the evidence.

This is where I build, test, and connect the tools behind my cybersecurity learning. Explore the lab architecture and the questions I ask at each layer.

Explore the lab
01 / Inside the home SOCMacBook Air · UTM / VMware · Windows & Linux

One environment.
Multiple perspectives.

I built a personal lab to connect attacker activity, network telemetry, endpoint evidence, and SIEM investigation. Select a layer to see its role.

THE TELEMETRY PATH CONCEPTUAL LAB ARCHITECTURE

Architecture overview, not a live dashboard. Network forwarding and deeper DFIR work are still developing.

My investigation rhythm
  1. 01Detect

    Find the signal.

  2. 02Validate

    Check the evidence.

  3. 03Scope

    Understand the impact.

  4. 04Respond

    Explain the next action.

FROM TOOLS TO EVIDENCE

See what I investigated.

Read the lab case files, queries, findings, and decision principles on my portfolio.

View investigations