Blue Team

Focus: Defensive security operations.
Projects include:

• SIEM setup with Wazuh and Elastic.
• IDS/IPS tuning with Suricata.
• Endpoint hardening with Windows Defender ATP.
• Log analysis and incident response workflows.