A self-built home lab for learning MITRE ATT&CK from both sides — testing techniques offensively, then documenting exactly what each one produces defensively in a Wazuh SIEM. Everything here is a working notebook, not a polished case study: builds in progress, alerts still being triaged, techniques still being tested.