Cyber Operations Center Engineering Program
An evolving home COC built to bring monitoring, endpoint security, secure remote access, detection engineering, automation and incident response together as one system.
View the repositoryCYBERSECURITY · INFRASTRUCTURE · AUTOMATION
I'm Scott. I'm building a home Cyber Operations Center from the ground up and documenting the decisions, mistakes, troubleshooting and lessons that come with it.
ABOUT
I wanted an engineering journal and project portfolio that showed more than certifications and screenshots. Most of what you'll find here came from problems I ran into while building and securing my own environment.
I'm working toward cybersecurity and SOC-focused roles, with hands-on work across SIEM, endpoint security, networking, Linux, containers, automation and cloud. I don't pretend my homelab is an enterprise environment. Part of the point is learning where the differences are, and what I would do differently at scale.
FEATURED WORK
An evolving home COC built to bring monitoring, endpoint security, secure remote access, detection engineering, automation and incident response together as one system.
View the repositoryAn adversary-simulation and detection-validation platform designed to generate realistic activity and test whether my defensive controls actually see what I expect them to see.
View the repositoryA self-hosted automation and intelligence platform with completed cybersecurity intelligence and certification lifecycle modules.
View the repositoryThe Linux Mint Cinnamon engineering workstation and primary COC control node, built with secure installation, selective restoration, endpoint monitoring and acceptance testing.
View the repositoryCode and configuration will be linked here as each project reaches a state that's useful to share. Until then, the journal shows the work without pretending unfinished repos are finished projects.
SKILLS & TECHNOLOGY
These are tools and areas I'm using in the lab—not a claim that I've mastered every item.
ENGINEERING JOURNAL
Build decisions, failed assumptions, troubleshooting notes and the lessons worth keeping.
How the official exam blueprint and a rough first practice result turned into a focused study plan—and a pass on the real exam.
Read the entryHow an older Dell Latitude became the Ubuntu Server backbone for my home COC—and why the final engineering decisions mattered.
Read the entryHow a simple expiry reminder became a tested system for renewal rules, continuing-education progress, authenticated updates and auditable email delivery.
Read the entryHow I turned eight security feeds into one ranked daily briefing without just moving information overload into my inbox.
Read the entryThe project started smaller than this. Here's how it turned into the backbone of my cybersecurity learning.
Read the entryWhat changed when I stopped collecting isolated projects and started treating the lab as one documented system.
Read the entryThe controls, compromises and validation behind the laptop, workstation, phone and tablet baseline.
Read the entry