SOC Analysis Lab

📌 Overview

This repository contains files and documentation for a cybersecurity lab simulating Security Operations Center (SOC) traffic analysis.
The purpose is to practice network traffic investigation, incident detection, and Wireshark analysis.

---

🔍 Lab Objective

• Analyze captured network traffic (PCAP files)
• Identify suspicious activity, potential intrusions, or unusual communications
• Document findings with screenshots, notes, and reports

---

🧠 Skills Demonstrated

• Network traffic analysis using Wireshark
• Detection of suspicious traffic patterns
• TCP/UDP protocol understanding
• Documentation of SOC investigations
• Creating structured incident reports

---

▶️ How to Use

1. Open PCAP files in Wireshark
2. Follow notes and screenshots for context
3. Review any included documentation for final findings

---

⚡ Key Findings

• Example suspicious IPs, HTTP POST anomalies, or potential malicious traffic
• Clear visualization of network conversations and endpoints

---

📜 License

This lab is for educational purposes only.