May 18 09:14:03 sshd: Accepted publickey for analyst
May 18 09:16:22 sudo: session opened for root
May 18 09:18:47 sshd: Failed password · 3 attempts
May 18 09:19:01 auditd: USER_AUTH recorded
01 — SECURITY HOME LAB
Learning security
by doing.
My home lab is where I practice the fundamentals behind a SOC role: reading logs, reviewing authentication events, and checking system changes.
- Centralized Linux logs with rsyslog
- SSH event review and auditd rules
- AIDE file-integrity checks; Samba AD and Kerberos practice