Part 1: Planning the Infrastructure

Challenge

Gaining practical experience in SOC tasks like alert management, response actions, and data enrichment using a functional SOAR setup.

Solution

Building a home lab environment from scratch, diagramming the architecture, and planning the deployment of Wazuh, The Hive, and Shuffle for event logging, alert triggering/enrichment, and case management.

Results

• Planned the SOC lab infrastructure
• Created a logical flow diagram using Draw.io
• Outlined the main workflow from event generation to case management
• Mapped alert flow using color-coded connections