siem-detection-and-response-lab
Active Directory homelab with Azure Sentinel SIEM integration. Kerberoasting, AS-REP Roasting, Pass-the-Hash attack scenarios with KQL detections and IR reports.
Azure Sentinel
Active Directory
KQL
MITRE ATT&CK
m365-endpoint-administration-lab
Microsoft 365 endpoint administration lab environment for MD-102 preparation, covering Intune device management, compliance policies, and endpoint security.
Microsoft 365
Intune
MD-102
Endpoint Security