Home SIEM & EDR Lab (Splunk + Wazuh)

Set up and ran a home security operations lab, combining Splunk as a SIEM and Wazuh as an open-source SIEM/EDR platform, to practice log ingestion, correlation, and detection engineering.

• Configured Splunk to ingest logs across the home lab environment and built searches/dashboards to surface meaningful signal from noise.
• Deployed Wazuh alongside Splunk for endpoint detection, file integrity monitoring, and log analysis at no license cost — comparing strengths of a commercial SIEM against an open-source SIEM/EDR platform.
• Used this lab as the monitoring backbone for other projects, including the Digital Twin network security lab.

Full write-ups: Setting Up a Home SIEM with Splunk · Wazuh: The Free SIEM and EDR Worth Taking Seriously