Experiment. Learn. Repeat.
Cybersecurity Monitoring Lab – Part 1 – Installing pfSense The goal of this project is to be on build a homelab in order to practice setting up I.T infrastructure for monitoring networks. For the first part of this series, we’re going to install pfSense. PfSense is an open source router and firewall software solution. It … Read More “Creating a pfSense Firewall” »
For the next part of setting up our homelab, we’re going to set up a Kali Linux virtual machine. Kali Linux is Linux distribution that comes with numerous security and pentesting tools out of the box. We’re going to use this machine to simulate attacks on our victim networks. Downloading the Iso Go to the … Read More “Installing Kali Linux in Proxmox” »
In this part of setting up our homelab, we’re going to define the firewall rules for our networks in pfSense. Logging in to pfSense Open firefox on your Kali machine and enter the IP address of the pfSense interface. Recall that this IP address is the gateway address for the LAN interface of our pfSense … Read More “Configuring pfSense Firewall” »
In this post, we’re going to set up an IDS (Intrusion Detection System) called Suricata for our lab. What’s an IDS? It’s a program that analyzes network traffic to look for malicious or suspicious data based on pre-configured rules. Similar to how anti-virus software can identify malware based on signatures, an IDS can analyze network … Read More “Configuring Suricata IDS in Proxmox” »
Windows Server Installation In this guide, we’ll go through setting up an Active Directory forest in Proxmox. This guide will be broken up into several parts: Active Directory Overview At a high level, Active Directory centralizes the management of network resources and users in Windows environments. In an organization, you can have hundreds or thousands … Read More “Adding an Active Directory Forest to Proxmox” »
Wazuh is a SIEM (Security Information and Event Management) system that can be used to centralize logs and other security related information from systems on our networks. Using this information, analysts can detect and respond to intrusions, attacks and other malicious activity. For this homelab, Wazuh will be used in conjunction with Suricata to monitor … Read More “Wazuh SIEM Setup in Proxmox” »
