This repo list some of my security-related writeups covering blue team work (SIEM lab, Incident response, forensics) and Red Team (Web exploitation and more).
Source for prosmaw.github.io/writeups, built with MkDocs Material and deployed via GitHub Pages.
- A growing list of security labs and CTF writeups, each walking through the environment, the attack simulation, and the investigation.
- Screenshots throughout, so you can follow each step alongside the writeup.
- SOC Detection Lab: Simulation and detection of real-world attack techniques (Kerberoasting, Credential Dumping) in a self-built Active Directory environment with a Splunk SIEM.
- Insider Threat IR Lab — Following the NIST Incident Response process to investigate a simulated insider-threat data leak, from AD audit policy setup and a honey file, through log analysis, to containment and lessons learned.
- SANS Holiday Hack Challenge 2025 ↗ — Write-up of the SANS Holiday Hack Challenge 2025 (hosted in a separate repo).
pip install mkdocs-material
mkdocs serve