Cisco Hosted a BOTS battle using Splunk SIEM.This event challenged participants to investigate simulated cyberattacks using real-world security operations center data in Splunk, analyzing logs, identifying threats, and responding to incidents under time pressure.

Built a home lab server with Active Directory Domain Services. Configured a Windows Server VM as a domain controller, created organizational units, users, and groups, and joined client machines to the domain.

Deployed a multi-VM lab environment for penetration testing, will include malware analysis, and SOC operations. Integrated logging, monitoring, and simulated threat actors for hands-on learning.