Home SOC & Splunk SIEM

Create a practical SOC environment that demonstrates log collection, detection development, alert triage and investigation.

• Designing the lab architecture and security data sources.
• Configuring log ingestion and SPL searches.
• Developing detection queries and investigation workflows.
• Documenting architecture, findings and supporting evidence.

This operation demonstrates practical ownership across technical investigation, risk-aware prioritisation, implementation and clear communication. It also shows how security and infrastructure work must remain usable, supportable and aligned to the live environment.