Security Monitoring and Authentication Analysis Lab
Queried Windows authentication events in Splunk and organized activity by user, host, and time to investigate failed sign-ins and unusual access patterns. Documented evidence, analytical findings, and escalation notes; installed Wazuh on Ubuntu Server and verified dashboard access to expand endpoint-monitoring practice.
