🏛️Architect Overview

20 labs · Docker-verified

Enterprise security architecture: SOC design, Zero Trust, PKI, SOAR, compliance frameworks, and risk quantification.

---

Labs

#	Lab	Topic
01	SOC Architecture	SOC tiers, SIEM, MTTD/MTTR
02	SIEM Design with Elastic	ELK stack, Sigma rules, EQL
03	Threat Intelligence Platform	STIX 2.1, TAXII, TIPs
04	Zero Trust Design	NIST SP 800-207, PEP/PDP/PA
05	Cloud Security Architecture	CSPM, CWPP, CASB
06	IAM Architecture	SAML, OAuth2/OIDC, RBAC
07	PKI & CA Design	3-tier PKI, OCSP, SPIFFE
08	SOAR Automation	Playbooks, orchestration
09	Container & Kubernetes Security	Admission, Falco, policies
10	DevSecOps Pipeline	SAST, DAST, SCA, IaC scanning
11	Incident Response Framework	NIST SP 800-61, playbooks
12	Threat Hunting Methodology	ATT&CK, hypothesis-driven
13	Red Team Operations	Kill chain, C2, purple team
14	BCP & Disaster Recovery	RTO/RPO, 3-2-1, ransomware
15	Compliance Frameworks	ISO 27001, SOC 2, NIST CSF, PCI DSS
16	Vulnerability Management Program	CVSS, EPSS, SLA tiers
17	DLP Architecture	Data classification, PII detection
18	Network Security Architecture Review	Firewall audit, segmentation
19	Security Metrics & Risk Quantification	FAIR, Monte Carlo, ROI
20	Capstone — Enterprise Security Architecture	Full enterprise security design

---

Start here → Lab 01: SOC Architecture