INTRODUCTION
So... it would seem that hosting a network lab seems to be the meta for employment. Well, thankfully I like to self-host for fun anyways.
I've worked on a lot of projects, primarily game development - but I have occasionally done more general software projects. On top of that, up until recently I worked in cyber warfare. I figured it'd be finally time to put together a web portfolio with past projects (which I can recover, anyways) and present projects.
So, with that, two problems come up for me:
I don't want to spend any more money on this (yet) than I already have.
I can't just let bad actors on the internet perform shenanigans, tomfoolery, or any other funny business on my stuff.
For point 1, the solution is easy: self-hosting. Now, for point 2, it gets a bit dicier. The internet is a scary place, as I'm sure you all are aware. I need a way to deal with that. I have some hardware which can run Proxmox, but not nearly enough to deploy a whole network analysis toolset that I've used in my cyber experience. (cough, cough, storage is an issue.) Now, that's where I found out about Wazuh.
WAZUH
Wazuh, for those who don't know, is a free-and-open-source SIEM and XDR platform. It can help me with my host analysis AS WELL AS running tests to see where I need to harden. Awesome! Now, the next question that comes from here is: how do I cover my networking blindspot without destroying my storage?
As it turns out, the answer was sitting right in front of me: I've used Security Onion before, which has Zeek. We've used Zeek to analyse data on Elastic as well as sending them to Splunk via host agents to get a new view. What if I did the same here?
So that's what I did. Of course, I'm not doing any PCAP capture, otherwise my storage would get filled up quick. Only metadata from the network traffic is being captured. But all of that metadata is being sent to Wazuh via host agents! One custom dashboard later, and now I have a good view of what's going on!
PORTFOLIO
The web portfolio I had to redo over and over again. I started with Svelte, restarted a few times, then had the brilliant idea of doing it all within Godot. Of course, with the issues that'd bring up, I opted to just stick with Svelte and have an actual roadmap of what I'd add. And now... here we are.
I do intend to offer cyber services in the future, so this web portfolio will move around a little bit, but until then - this should be good!