Threat Detection Lab — THOR-HQ

A living companion page for the Building Threat Detection Lab from Scratch video series on THOR-HQ. This document stays live and gets new resources added as related episodes are published on YouTube.

Series episodes

1. Episode 1 — Lab Architecture and Installing Firewall (OpnSense) on VM
2. Episode 2 — Install Linux and Windows 11 VM & Configure Firewall Rules
3. Episode 3 — Learn Logging & Setup Docker, Splunk, Sysmon, Splunk-UF
4. Episode 4 — Elastic Security Lab | SIEM + EDR + Packetbeat + Cases + Agents
5. Episode 5 — Multi SIEM Setup & Log Forwarding to Multiple SIEMs
6. Episode 6 — Setting up Network Detection & Response Tools
7. Episode 7 — Integrate SOAR, JIRA, Elastic-SIEM, Jupyter for Automation & Analysis

Watch the full playlist on THOR-HQ for the latest episodes as they're published.