Sign-In
Cart
Home SOC / XDR Lab in Action: Build, Monitor, and Automate Security Operations with Wazuh, ELK, and Modern Detection Tools
Paperback
Publisher: Independently Published
Published: Oct 24 2025
Pages: 394
Weight: 2.01
Height: 0.81 Width: 8.50 Depth: 11.00
Language: English
Turn your homelab into a full-scale Security Operations Center (SOC) and XDR platform-built with open-source power, engineered for real-world defense.
In Home SOC / XDR Lab in Action, you'll learn how to architect, deploy, and automate a complete SOC using Wazuh, Elasticsearch (ELK), Suricata, Zeek, TheHive, Cortex, and Grafana. Every chapter is hands-on, every workflow tested, and every configuration ready for implementation-no theory, no filler, just modern defensive engineering.
You'll begin by understanding SOC tiers, XDR concepts, and modern detection pipelines, then progress to building a full stack that ingests, correlates, and visualizes events across endpoints, servers, and networks.
Learn to integrate Linux and Windows agents, Suricata and Zeek telemetry, and enrich data using GeoIP and threat intelligence feeds.
Finally, automate detection and response workflows using TheHive, Cortex, and SOAR integrations like Shuffle and Node-RED.
Each section includes real-world lab exercises, modular configurations, and reproducible deployments-ideal for SOC analysts, blue-teamers, cybersecurity students, and homelab builders who want to master modern security operations from the ground up.
Inside You'll Learn How To:- Deploy Wazuh + ELK on Proxmox or Docker for fast SOC setup.
- Integrate Suricata, Zeek, and Beats agents for full telemetry coverage.
- Design and tune Wazuh rules, decoders, and Sigma-based detections.
- Enrich and correlate events with AlienVault OTX and AbuseIPDB feeds.
- Automate incident response with TheHive, Cortex, and SOAR pipelines.
- Monitor SOC performance using Prometheus, Grafana, and alerting workflows.
- Harden your lab with TLS, RBAC, and backup/restore automation.
Unlike traditional security guides, this book builds a complete, operational SOC using the same stack trusted by professional defenders.
It's designed for 2025-ready environments-hybrid, containerized, telemetry-driven, and automation-first.
Whether you're a SOC analyst, incident responder, or security researcher, this book gives you the practical mastery to build, monitor, and automate real-world detection and response systems.
Hands-on. Complete. Future-proof.
Home SOC / XDR Lab in Action is your blueprint to designing and operating a modern, intelligent SOC from your own homelab-step by step, tool by tool, alert by alert.
Also from
Vexel, Alira
Vector Databases in Practice: Build RAG & AI Search with Qdrant, Milvus & Open-Source Tooling
Vexel, Alira
Paperback
Mastering React 19 & TypeScript: From Fundamentals to Production-Ready Web Apps
Vexel, Alira
Paperback
Cloud-Hybrid Homelab Federation: Unify Proxmox, K3s, and Terraform Across Cloud and Homelab Environments
Vexel, Alira
Paperback
Semantic Kernel, MCP & n8n: A Beginner's Guide to Intelligent Workflows, Tool Calling, and Automation
Vexel, Alira
Paperback
Mastering Container Security: Hardening Podman, Rootless Docker, and Linux Containers for Modern DevSecOps
Vexel, Alira
Paperback
Prompt Engineering for Real-World Impact: Build Practical AI Workflows for Business, Tech, and Education
Vexel, Alira
Paperback
AI-Powered Writing: Master the Tools, Preserve Your Voice, and Write Ethically Across Genres
Vexel, Alira
Paperback
Infrastructure as Code for Homelabs: Automate Your Servers with Terraform, Ansible, and SaltStack
Vexel, Alira
Paperback
Cloud-Native DevOps with Docker & Kubernetes: Build, Secure, and Scale with Helm, ArgoCD, and GitOps
Vexel, Alira
Paperback
FastAPI in Production: Build High-Performance APIs for AI, Cloud, and Modern Backend Systems
Vexel, Alira
Paperback
AI-Free Homelab Security Projects: Build Hands-On Honeypots, Deception Traps & Intrusion Labs Without AI
Vexel, Alira
Paperback
Modern GraphQL from Scratch: Build Type-Safe APIs with TypeScript, Secure Schemas, Federation & Edge Deployment
Vexel, Alira
Paperback
Modern Data Engineering for LLMs: Architect, Automate, and Optimize Data Pipelines for AI Systems
Vexel, Alira
Paperback
AI-Powered Proxmox Automation: Intelligent VM Scaling, Self-Healing Clusters & Predictive Ops
Vexel, Alira
Paperback
Next-Gen DevOps Automation: Hands-On CI/CD with GitHub Actions, GitLab, and Jenkins in the Cloud
Vexel, Alira
Paperback
Envoy Proxy Deep Dive: L7 Routing, Observability & Zero-Trust Traffic Control for Modern Cloud-Native Systems
Vexel, Alira
Paperback
Modern Microsoft Power BI for Beginners: A Complete Guide to DAX, Power Query, Data Modeling & Fabric Dashboards
Vexel, Alira
Paperback
Building Data Mesh Systems: Design, Govern, and Scale Domain-Driven Data Platforms Without Chaos
Vexel, Alira
Paperback
Building AI Agents with n8n: Automate Workflows, Integrate LLMs, and Orchestrate Tools at Scale
Vexel, Alira
Paperback
From Models to Mastery: Building Classical & Deep Learning Systems with PyTorch, Scikit-Learn, and Python
Vexel, Alira
Paperback
Cloud-Native CI/CD: Automate Builds, Testing, and Deployments with GitHub, GitLab, and Jenkins
Vexel, Alira
Paperback
Also in
Networking
CompTIA Network+ Certification All-in-One Exam Guide, Ninth Edition (Exam N10-009)
Weissman, Jonathan S.
Paperback
The Groundbreaker: Entrepreneurship, the American Dream, and the Rise of Modern India
Rekhi, Kanwal
Hardcover
The Wireless Cookbook: Build Real Projects and Master Wi-Fi, Bluetooth, and Lora
Zimmerman, Bill
Paperback
The Practice of System and Network Administration: Devops and Other Best Practices for Enterprise It, Volume 1
Limoncelli, Thomas
Hogan, Christina
Chalup, Strata
Paperback
Home Assistant for Beginners: Build a private smart home without relying on the cloud
Haagenrud, Thom
Paperback
Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation, Second Edition
Reiber, Lee
Paperback
Computer Science Unleashed: Harness the Power of Computational Systems
Ferreira Filho, Wladston
Pictet, Raimondo
Paperback
Cilium: Up and Running: Cloud Native Networking, Security, and Observability
Vibert, Nico
Nikolic, Filip
Laverack, James
Paperback
AI Data Center Network Design and Technologies
Styszynski, Michal
Tambakuwala, Himanshu
Subramaniam, Mahesh
Paperback
Mastering the Togaf(r) Standard: A Practical Translation of the World's Leading Architecture Framework
Jager, Eric
Paperback
Meshtastic: A Comprehensive Guide to Off-Grid Mesh Communication: Second Edition
Rodgers, David A., Jr.
Paperback
31 Days Before Your CCNA Exam: A Day-By-Day Review Guide for the CCNA 200-301 Certification Exam
Johnson, Allan
Paperback
Learn Computer Forensics - Second Edition: Your one-stop guide to searching, analyzing, acquiring, and securing digital evidence
Oettinger, William
Paperback
Root cause: Stories and Lessons from Two Decades of Backend Engineering Bugs
Nasser, Hussein
Paperback
Industrial Cybersecurity - Second Edition: Efficiently monitor the cybersecurity posture of your ICS environment
Ackerman, Pascal
Paperback
Zero Trust Networks: Building Secure Systems in Untrusted Networks
Gilman, Evan
Rais, Razi
Morillo, Christina
Paperback
Red Team Engineering: The Art of Building Offensive Tools and Infrastructure
Erdmann, Casey
Paperback
The Accidental Administrator: Cisco Router Step-by-Step Configuration Guide
Crawley, Don R.
Paperback
High Performance Browser Networking: What Every Web Developer Should Know about Networking and Web Performance
Grigorik, Ilya
Paperback
IA desde cero: Inteligencia Artificial explicada de forma fácil
García García-Tuñón, Susana
Paperback
Cisco ASA for Accidental Administrators: An Illustrated Step-by-Step ASA Learning and Configuration Guide
Crawley, Don R.
Paperback
Cisco CCNA Command Guide: An Introductory Guide for CCNA & Computer Networking Beginners
Nastase, Ramon
Paperback
Hands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools
Jaswal, Nipun
Paperback
CCNP and CCIE Enterprise Core & CCNP Enterprise Advanced Routing Portable Command Guide: All Encor (350-401) and Enarsi (300-410) Commands in One Comp
Gargano, Patrick
Empson, Scott
Paperback
Mastering Linux Security and Hardening - Third Edition: A practical guide to protecting your Linux system from cyber attacks
Tevault, Donald a.
Paperback
Engineering Trustworthy Systems: Get Cybersecurity Design Right the First Time
Saydjari, O. Sami
Paperback
Network Programmability and Automation: Skills for the Next-Generation Network Engineer
Lowe, Scott S.
Oswalt, Matt
Adell, Christian
Paperback
Delta Lake: The Definitive Guide: Modern Data Lakehouse Architectures with Data Lakes
Lee, Denny
Wentling, Tristen
Haines, Scott
Paperback
Crafting Great APIs with Domain-Driven Design: Collaborative Craftsmanship of Asynchronous and Synchronous APIs
Junker, Annegret
Lazzaretti, Fabrizio
Paperback
CCNP and CCIE Data Center Core Dccor 350-601 Official Cert Guide
Ahmed, Firas
Nikolov, Iskren
Maloo, Somit
Paperback
Learning API Styles: Understanding the Trade-Offs of Common APIs and Choosing the Correct Solutions
Dulak, Marcin
Dynowski, Lukasz
Paperback
A Complete Guide to Agentforce: Plan, Design, Build and Run AI Agents with Salesforce
Kovala, Timo
Paperback
Gray Hat Hacking: The Ethical Hacker's Handbook, Sixth Edition
Sims, Stephen
Harper, Allen
Linn, Ryan
Paperback
Mike Meyers' Comptia Network+ Guide to Managing and Troubleshooting Networks, Sixth Edition (Exam N10-008)
Jernigan, Scott
Paperback
ITIL(R) 4 Create, Deliver and Support (CDS): Your companion to the ITIL 4 Managing Professional CDS certification
Agutter, Claire
Paperback
Linux for Makers: Understanding the Operating System That Runs Raspberry Pi and Other Maker Sbcs
Newcomb, Aaron
Paperback
A Beginner's Guide to Mainframe z/OS Networking - Connecting and Communicating in the Mainframe World - Book 5
Sahoo, Natabar
Paperback
Linux Kernel Programming - Second Edition: A comprehensive and practical guide to kernel internals, writing modules, and kernel synchronization
Billimoria, Kaiwan N.
Paperback
Business Data Communications & IT Infrastructures
Agrawal, Manish
Daniel, Clinton
Connolly, Amy
Paperback
The Home Network Manual: The Complete Guide to Setting Up, Upgrading, and Securing Your Home Network
Buchanan, Marlon
Paperback
Starlink Made Simple: A Step-by-Step Guide to Setting Up, Using, and Mastering SpaceX's Satellite Internet
Mavis, Taylor
Paperback
Wireshark Certified Network Analyst Exam Prep Guide (Second Edition): WCNA Official Exam Prep Guide
Chappell, Laura
Paperback
Electronics Projects with the Esp8266 and Esp32: Building Web Pages, Applications, and Wifi Enabled Devices
Cameron, Neil
Paperback
Mastering Windows Server 2022 - Fourth Edition: Comprehensive administration of your Windows Server environment
Krause, Jordan
Paperback
AWS for Solutions Architects - Third Edition: Design and scale secure AWS architectures with GenAI strategies and real-world patterns
Shrivastava, Saurabh
Srivastav, Neelanjali
Thakur, Dhiraj
Paperback
Fatal Abstraction: Revolutionizing Strategy and Innovation for the Age of AI
Nichols, Michael
Paperback
Enterprise Guide for Implementing Generative AI and Agentic AI: A Practical Guide to Developing, Deploying, and Operationalizing Ai-Driven Application
Bhattacharya, Rahul
Sinha, Vikas
Edward, Shakuntala Gupta
Paperback
The Elements of Networking Style: And Other Essays & Animadversions on the Art of Intercomputer Networking
Padlipsky, M. a.
Paperback
Mastering Linux Security and Hardening - Third Edition: A practical guide to protecting your Linux system from cyber attacks
Tevault, Donald a.
Hardcover
CCNP Data Center Application Centric Infrastructure 300-620 Dcaci Official Cert Guide
Ahmadi, Ammar
Hardcover
UNIX in a Nutshell: A Desktop Quick Reference - Covers Gnu/Linux, Mac OS X, and Solaris
Robbins, Arnold
Paperback
Time Management for System Administrators: Stop Working Late and Start Working Smart
Limoncelli, Thomas A.
Paperback
Mastering Palo Alto Networks - Third Edition: The complete journey to firewall mastery from setup to advanced security
'Reaper', Tom Piens Aka
Paperback
Security Operations Center: Building, Operating, and Maintaining Your Soc
McIntyre, Gary
Alfardan, Nadhem
Muniz, Joseph
Paperback
Comando de Linux: Una guía completa para principiantes para aprender los reinos del comando Linux desde A-Z
Vance, William
Paperback
The Fraud Fighter's AI Playbook: Strategies for the Genai Era
Saporta, Gilit
Maraney, Shoshana
Zamir, Chen
Paperback
iPhone 8: The User Guide For all iPhone 8, iPhone 8 Plus and older iPhone model Users
Binjeh, Jhale
Paperback
Migrating to SAP S/4hana: Operating Models, Migration Scenarios, Tools, and Implementation
Finkbohner, Frank
Höft, Martina
Densborn, Frank
Hardcover
Computer Networking for Beginners: The Beginner's guide for Mastering Computer Networking, the Internet and the OSI Model
Nastase, Ramon Adrian
Paperback
Enterprise Architecture with Sap: Planning, Management, and Transformation
Klee, Peter
Reichel, Johannes
Das, Anup
Paperback
Hacking Exposed Industrial Control Systems: ICS and Scada Security Secrets & Solutions
Singer, Bryan
Shbeeb, Aaron
Bodungen, Clint
Paperback
Asterisk: The Definitive Guide: Open Source Telephony for the Enterprise
Meggelen, Jim Van
Bryant, Russell
Madsen, Leif
Paperback
ITIL 4 Digital and IT Strategy (DITS): Your companion to the ITIL 4 Strategic Leader DITS certification
Agutter, Claire
Paperback
IP Subnetting for Beginners: Your Complete Guide to Master IP Subnetting in 4 Simple Steps
Nastase, Ramon A.
Paperback
Cisco CCNA Command Guide: An Introductory Guide for CCNA & Computer Networking Beginners
Nastase, Ramon
Paperback
Beginning Lora Radio Networks with Arduino: Build Long Range, Low Power Wireless Iot Networks
Seneviratne, Pradeeka
Paperback
Development and Deployment of Multiplayer Online Games, Vol. II: DIY, (Re)Actors, Client Arch., Unity/UE4/ Lumberyard/Urho3D
Hare, 'No Bugs'
Hardcover
IDS and IPS with Snort 3: Get up and running with Snort 3 and discover effective solutions to your security issues
Thomas, Ashley
Paperback
Hands-On Ethical Hacking Tactics: Strategies, tools, and techniques for effective cyber defense
Hartman, Shane
Paperback
Wireless Security Architecture: Designing and Maintaining Secure Wireless for Enterprise
Minella, Jennifer
Paperback
Perceptrons, Reissue of the 1988 Expanded Edition with a New Foreword by Léon Bottou: An Introduction to Computational Geometry
Papert, Seymour A.
Minsky, Marvin
Paperback
Practical Lakehouse Architecture: Designing and Implementing Modern Data Platforms at Scale
Thalpati, Gaurav Ashok
Paperback
Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks
Zalewski, Michal
Paperback
Agentic AI in Enterprise: Harnessing Agentic AI for Business Transformation
Chembachere, Divya
Lobo, Lanwin
Ranjan, Sumit
Paperback
TCP/IP Illustrated, Volume 3: TCP for Transactions, Http, Nntp, and the UNIX Domain Protocols
Stevens, W.
Paperback
Intelligent Iot Analytics: Concepts and Real-World Applications
Mahendra, Adhiguna
Rinaldi, Ekki
Paperback
Ethernet: The Definitive Guide: Designing and Managing Local Area Networks
Zimmerman, Joann
Spurgeon, Charles E.
Paperback
iOS Forensics for Investigators: Take mobile forensics to the next level by analyzing, extracting, and reporting sensitive evidence
Tiepolo, Gianluca
Paperback
Client Logbook: A client log book is a written record of a client's interactions with a particular service or organization.
Publishing, Myjwc
Paperback
CompTIA A+ Practice Test Core 1 (220-1101): Over 500 practice questions to help you pass the CompTIA A+ Core 1 exam on your first attempt
Birch, Mark
Neil, Ian
Paperback
Segment Routing for Service Provider and Enterprise Networks
Minder, Rene
Hoxha, Leonir
Deragisch, Florian
Paperback
Ansible: Up and Running: Automating Configuration Management and Deployment the Easy Way
Moser, René
Meijer, Bas
Hochstein, Lorin
Paperback
Network Security with OpenSSL: Cryptography for Secure Communications
Messier, Matt
Chandra, Pravir
Viega, John
Paperback
Samsung Galaxy A16 5g User Guide for Beginners and Seniors: Samsung Galaxy A16 5g User Guide for Beginners and Seniors
Macvey, Elliot A. a.
Paperback
Cwna Certified Wireless Network Administrator Study Guide: Exam Cwna-108
Coleman, David D.
Westcott, David A.
Paperback
The Iot Hacker's Handbook: A Practical Guide to Hacking the Internet of Things
Gupta, Aditya
Paperback
Top 20 Essential Skills for ArcGIS Utility Network
Myers, Remi
Mayo, Melissa L.
Cremons, Christopher
Paperback
Network Programming in Elixir and ERLANG: Write High-Performance, Scalable, and Reliable Apps with TCP and Udp
Leopardi, Andrea
Paperback