Newsletter
Technical insights and practical cybersecurity resources
Cybersecurity Home Lab — Project Complete
The Cybersecurity Home Lab is now fully complete. 4 phases, 7 scenarios — from network exploitation to Active Directory attacks, SIEM detection, and incident response forensics. Full documentation available on GitHub.
Get it here: github.com/bandaramergit/cybersecurity-homelab
Active Directory Attack & Defense — Premium Guide Now Available
The paid guide is now live. A 21-page hands-on field guide covering Kerberoasting and Pass-the-Hash — from execution to detection in Splunk. Available in English and Arabic.
Get it here: bandaramer.com/guides
Cybersecurity Home Lab — Phase 3: SIEM & Detection Engineering
Deployed Splunk as a centralized SIEM across the full lab environment. Connected DC01 (Windows Server 2022) and three Windows 10 domain clients as data sources. Built detection rules for Kerberoasting (Event ID 4769) and Pass-the-Hash (Event ID 4624/4648), triggering real alerts from actual attack simulations. Developed a SOC dashboard visualizing security events across the domain in real time.
Technologies: Splunk, Splunk Universal Forwarder, Windows Event Logs, Active Directory, Kali Linux
Get it here: github.com/bandaramergit/cybersecurity-homelab