Proxmox Homelab SOC
A virtualized small-company network for practicing detection and administration end to end: a Windows Server domain with users and workstations, a Wazuh SIEM collecting endpoint logs, Nessus for vulnerability scanning, and Kali for generating attack traffic to detect.
proxmox-ve ├── DC01 # Windows Server · AD DS, DNS, DHCP, Group Policy ├── ADMIN01 # Admin workstation · tiered local-admin rights ├── WS-* # Domain-joined user workstations ├── WAZUH # SIEM · agent log collection and alerting ├── NESSUS # Vulnerability scanning ├── KALI # Attack simulation └── DNS/VPN # Pi-hole, AdGuard, Tailscale


