#MITRE ATT&CK

Hybrid SOC simulation: XDR and automation

An on-prem and Google Cloud security-monitoring lab built on limited hardware. OPNsense and GCP firewall logs flow into Wazuh, custom detections map to MITRE ATT&CK, and n8n automates the incident-response workflow.