Administration Master Lab

• Active Directory Lab
  • This Active Directory lab simulates a corporate environment with a Windows Server 2019 Domain Controller and Windows 10 client in VirtualBox. It includes AD Domain Services, DHCP, RAS/NAT, and Group Policy Objects (GPO) for network and policy management. A Python script automates user creation, providing hands-on experience in system administration and network configuration.
• Ubuntu AD Integration
  • Building on from Active Directory Lab with an Ubuntu Server centralizing user management configuring network settings, joining the Ubuntu Server to the AD domain, setting up Kerberos authentication, and optimizing system configurations.

Infrastructure Automation and Monitoring

• Weather-Dashboard-Automation (New)
  • A fully automated solution using AWS and Ansible to fetch daily weather data, store it in S3, trigger a Lambda function via EventBridge, and send aggregated weather reports to subscribers via SNS. Built with IaC principles for scalability and reliability!
• HPC_CryptoCluster
  • Automated deployment of a high-performance computing (HPC) cluster featuring stateless compute nodes with Warewulf, Slurm for job scheduling, and John the Ripper for distributed password cracking. This project highlights the integration of automation, scalability, and cybersecurity testing in an HPC environment.
• HA-WebTrack
  • A high-availability web server setup built with Ansible, featuring automated infrastructure deployment, load balancing with HAProxy, real-time monitoring with Prometheus and Grafana, and hands-on testing for high-load stress and failover scenarios. It emphasizes RHCSA and RHCE practices, using dynamic variables and role-based playbooks for scalability.
• Elastic_labs
  • The elastic_labs project is designed to simulate a Elastic Stack environment using Ansible for automated deployment and management. This setup focuses on configuring a comprehensive SIEM system that includes Elasticsearch, Kibana, Fleet, Zeek integration, and Elastic Agents on a controlled RHEL environment.

Cloud Security Ventures

• Breach Tracker (New)
  • Breach Tracker is an AWS-based system that automates breach data retrieval using a Flask app on ECS Fargate. It integrates public API Gateway with private ALB and ECS for secure and scalable data delivery. Built with Terraform and Ansible, it streamlines infrastructure deployment and management.
• CVEDataLake (New)
  • CVEDataLake automates CVE data ingestion, storage, and querying using AWS S3, Glue, and Athena. It integrates public data sources with structured querying, enabling security teams to analyze vulnerabilities efficiently. With Ansible automation, it streamlines deployment and generates JSON reports for audits, dashboards, and security workflows.
• The Cyber Streetracker
  • The Cyber Streetracker is a comprehensive web application designed to provide real-time cybersecurity news and vulnerability search capabilities, leveraging Azure services for robust functionality and security. This project implements advanced features such as OAuth2.0 authentication, Azure Functions, and a Web Application Firewall, ensuring a secure and responsive user experience.
• Live SOC/Honeynet in Azure
  • This Azure honeynet project uses Microsoft Sentinel to monitor threats on exposed VMs, SQL Server, Blob Storage, and Key Vault. Initial logs capture vulnerabilities and attacks, which are then reduced by applying Network Security Groups, firewalls, and Private Endpoints. The project showcases how security controls enhance threat detection and protection in Sentinel.

Security Operations Center(SOC) Initiatives

• Security Onion SOC Workshop
  • This project builds a virtual SOC environment with Security Onion for malware analysis and network monitoring. Using Zeek, Suricata, Wireshark, and OSINT tools (AbuseIPDB, VirusTotal), it covers importing malicious PCAPs, analyzing alerts, and creating incident reports, providing hands-on SOC experience in threat detection and response.
• Project Fishy Phiisshing
  • This project automates phishing email collection from GitHub for analysis on a Kali Linux VM. Using Thunderbird, Talos Intelligence, VirusTotal, and PhishTool, it dissects phishing tactics. The final SOC-style report provides insights, technical findings, and recommendations to strengthen defenses against phishing attacks.
• Qualys Quest Analysis
  • This project uses Qualys to scan a Windows VM with outdated software in VirtualBox, set up in a NAT network. Vulnerabilities are remediated and tracked, with results visualized in Google Sheets pivot tables to create a trend report, highlighting effective vulnerability management cycle.