A home network built in layers — SIEM first, segmentation and an offensive box coming next. Each component gets added deliberately, with real reasoning behind sequencing rather than throwing everything in at once.
Headless Wazuh SIEM manager, administered via SSH. Central point for log ingestion, alert rules, and dashboard review.
Wiped and staged as a dedicated firewall for network segmentation. Cutover planned for a travel week to avoid disrupting household network use.
Future offensive box for Atomic Red Team exercises and purple-teaming against the Wazuh detection stack.
Currently primary router; will switch to Access Point mode once OPNsense is inline as the routing/firewall layer.
Free/dev-tier tenant integrated with Wazuh via the Graph API–based azure-logs module, feeding directory audit and sign-in activity into the SIEM.