Proof that the studying turns into things built. A project only counts as complete when it is something you would link in a job application.
The completion bar counts only finished work. In-progress projects are listed but do not inflate the number.
Build a home Security Operations Center lab with SIEM, IDS, and log collection.
Why it matters: Demonstrates you can set up and operate the same tools used in enterprise SOCs.
No repository linked yet.
Conduct a threat hunt on a dataset and produce a full writeup.
Why it matters: Shows analytical thinking and communication — critical for SOC roles.
No repository linked yet.
Build a Python tool that parses Windows Event logs and flags suspicious activity.
Why it matters: Automation is a force multiplier — every SOC needs scripting skills.
No repository linked yet.
Build a Python vulnerability scanner that integrates with NVD/CVE feeds.
Why it matters: Shows understanding of vulnerability management and API integration.
No repository linked yet.
Document a complete IR runbook for a phishing attack scenario.
Why it matters: Demonstrates process thinking and IR knowledge — essential for SOC Analyst roles.
No repository linked yet.