While getting ready for my first SOC seat, I build tools and test app ideas. This page moves when things move. Nothing here is a promise, everything is either running or queued.
The machine that hunts so I do not have to refresh tabs. It collects junior SOC offers across FR and UK boards, scores them against my profile, and serves everything on a private dashboard.
A full SOC stack running on Docker at home. Splunk and Elasticsearch ingest lab events, TheHive handles cases, Cortex enriches. This is where I rehearse triage end to end, from raw log to verdict.
Public study notes: SIEM hunting queries, forensics walkthroughs, CTF writeups. Writing forces me to actually understand what happens in the lab, and it doubles as my SOC portfolio.
A 100% static PWA for daily reps: quizzes, CVE analysis, translated security news, cheatsheets. No backend, no cost, one habit a day.
The rest of the list lives in a private vault. An idea earns its line here only once there is something to click.