Complete SOC Analyst Training Roadmap 2026: 14 hands-on projects (SIEM, SOAR, TIP, ML) for automation-first defenders
Wazuh SOC Lab: A comprehensive hands-on environment and documentation for deploying, configuring, and testing Wazuh SIEM/SOC capabilities, including agent setup, Sysmon integration, and active response scenarios.
Open-source Sigma detection rules for SOC teams, covering active CVEs, real-world attacks, Fortinet, Windows, cloud threats, incident response and detection engineering.
A log triage utility designed to help SOC Analysts quickly identify threats and anomalies in server logs.
AI-powered SOC triage assistant for Wazuh with MITRE ATT&CK mapping, incident reporting, notifications and a Streamlit dashboard.
A Python-based automated sort tool for quick detecting IoCs in emails.
Open-source, on-premise, AI-powered SOC alert triage tool.
SOC Analyst Splunk Lab for threat detection, incident monitoring and blue team use cases.
From initial access to impact, this investigation report details my findings, methods, and lessons learned as a SOC Analyst during a mock incident-response investigation scoped for educational purposes based on the "Scanned Document 468" CTF by jirosgyros from https://github.com/jirosgyros/soc-ctf-scanned-document-468
Interactive SOC L1 Investigation Lab with 500+ simulated security alerts, SIEM-style triage, process analysis, threat intelligence, incident escalation and persistent investigation history.
Mini SIEM system
Hands-on network security lab using Kali Linux, Ubuntu, pfSense and Wireshark to configure an isolated network, analyze traffic, investigate anomalies and implement firewall controls
SOC analyst write-ups: malware analysis, YARA testing, threat detection
A modern SOC Toolkit for Threat Intelligence, IOC Enrichment, Phishing Analysis, YARA Scanning, and Security Automation.
An LLM-powered SOC assistant that can auto triage and guide analysts, based off provided Windows Event and Splunk logs.
Cloud security project: AWS IAM user creation, custom S3 bucket policies, and permission testing. Built for blue team portfolio.
To associate your repository with the soc-analysts-project topic, visit your repo's landing page and select "manage topics."