01Recon practice
Recon practice
Attack-surface mapping
A lab-based reconnaissance workflow for understanding exposed services, identifying what they are, and recording findings with useful context.
Practiced controlled discovery, service fingerprinting, and structured reporting in authorized environments.
NmapLinuxNetworkingReporting
02Threat intelligence
Threat intelligence
OSINT workflows
Open-source research exercises that connect publicly available clues into a defensible picture of a digital footprint.
Explored passive collection methods, source validation, and how to separate signal from assumption.
OSINTMaigretDNSResearch
03Defensive operations
Defensive operations
SOC triage
Hands-on practice reading alerts, correlating log activity, and deciding what deserves escalation rather than noise.
Worked through incident-analysis scenarios, evidence collection, and concise investigation notes.
SIEM conceptsLog analysisMITRE ATT&CKIR
04Network privacy
Network privacy
Traffic routing labs
A controlled look at proxies, tunnels, and encrypted traffic—how routing decisions affect visibility, privacy, and operational risk.
Studied network pathing and authenticated proxy configuration in isolated lab exercises.
ProxyChainsSOCKSTorNetwork labs