[SHARING] Simple Home-Lab (Firewall) with some of the use cases to Practice SOC - Mohammed Elganzoury

THIS CONTENT IS WRITTEN BY Mohammed Elganzoury.
Source: https://www.linkedin.com/feed/update/urn:li:activity:7076190352872812544/?origin=SHARED_BY_YOUR_NETWORK


 Simple Home-Lab (Firewall) with some of the use cases to Practice SOC .

 Download Virtualbox: https://lnkd.in/g8Cfjys9
 Download Kali Linux: https://lnkd.in/gQWU9zcD
 Download PfSense Firewall: https://lnkd.in/gC7V2KrX
 PfSense Installation: https://lnkd.in/gGU5tHed
 Download Windows 10

Create Two network interfaces on pfSense Firewall, one connected to the Windows 10 network, and the other to the Kali Linux network.

Download any one of them (ELK, QRadar) SIEM

Elastic ELK SIEM
Download and Installation - https://lnkd.in/dkf3Vb7B
Elastic Free Courses - https://lnkd.in/dKUtFcF7
Get logs from PfSense to ELK - https://lnkd.in/dWF2qYrT

QRadar SIEM
Download and Installation -https://lnkd.in/dCtbkk-H
QRadar SIEM Free Courses- https://lnkd.in/dw6aVSj9
Get logs to Qradar - https://lnkd.in/dAMBnXvf
QRadar - Jose Bravo - https://lnkd.in/dXbWAQ3R

SOC SIEM Use Cases
     Firewall Use Cases
1- Too many firewalls Denies for the same Source.
2- VPN logins from Multiple geolocations.
3- Horizontal Scan detected.  
4- Vertical Scan detected.
5- Scanning on Remote Access Ports.
6- High Volume of connection from the country of concern.             
7- Outbound SMTP traffic from Unauthorized Host.
8- Proxy Bypass Attempt.

 What is a Firewall..? 
https://lnkd.in/dAQ77Frp

other Posts :
- https://lnkd.in/ddQMfT5b?
- https://lnkd.in/dJgm-RFi?


For more content - https://lnkd.in/d2pYU-84