Security Monitoring Labs | cybersecurity101.net
48 free, step-by-step labs that build a small Wazuh monitoring stack on your own VMs, connect Linux and Windows (Sysmon) log sources, then write and tune detection rules, test them with simulated events, triage alerts and report on coverage. No account or hosted platform.
- from
- Detection Engineering
- added
- 2026-10-12
- likes
- 0
similar
-
WMI Monitor github.com
-
SOCLabs soc-labs.top
A lab for blue teamers and detection engineers, with real threat data and support for popular SIEM query languages, enabling hands-on learning and practice in detection rule writing and threat hunting.
-
OSSEC ossec.github.io
Comprehensive Open Source HIDS. Not for the faint of heart. Takes a bit to get your head around how it works. Performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response. It runs on most operating systems…
-
Rawsec Cybersecurity Inventory gitlab.com
-
Lazy Admin tryhackme.com
Easy Linux machine to practice your skills.
-
Windows Logging Cheatsheets malwarearchaeology.com
Multiple cheatsheets outlined recommendations for Windows Event logging at various levels of granularity.
Detection Engineering › General Resources: “48 free, step-by-step labs that build a small Wazuh monitoring stack on your own VMs, connect Linux and Windows (Sysmon) log sources, then write and tune detection rules, test them with simulated events, triage alerts and report on coverage. No account or hosted platform.”