log surveillance
siem homelab
Attacker vs defender setup with real log collection and detection.
live node // blue-team oriented
FERNANDO OLIVEIRA FIGARO
Cybersecurity professional and Python instructor focused on blue-team operations, incident response and automating the boring parts of defense.
$ nmap -sC -sV fer-cybersec.lab
22/tcp open ssh OpenSSH - hardened
80/tcp open http custom static site
443/tcp open https tls13, perfect forward secrecy
1337/tcp open custom blue-team & teaching toolkit
$ cat mission.txt
> teach, defend, and build automation that actually helps defenders
$
stack // tools of choice
logging & monitoring
Filebeat & log shipping
Elasticsearch
Kibana dashboards
OpenSearch
infrastructure
Linux (server & workstation)
Docker & Compose
Nginx / reverse proxies
Wireshark & tcpdump
development
Python (requests, asyncio)
Flask & FastAPI
Pandas & data inspection
SQL (SQLite, PostgreSQL)
tools & automation
Git & GitHub
Markdown & Jupyter
Bash & shell scripts
Streamlit dashboards
labs // selected operations
blue-team utilities
http inspector
Inspect headers, cookies and auth flows in practice scenarios.
detection engineering
query builder
Tool for crafting SIEM queries and testing detection logic.
incident response
ir toolkit
Collection of scripts for rapid incident response workflows.
network fingerprint // exposed metadata
contact // reach out
$ ./contact.sh --mode secure --medium email
> packaging message...
> encrypting payload...
> tunneling through corporate infrastructure...
> dropping into my inbox.
> packaging message...
> encrypting payload...
> tunneling through corporate infrastructure...
> dropping into my inbox.