MASON JETER

Designed and built a full enterprise-simulated environment using virtual machines running Windows and Linux. Configured Active Directory, network segmentation, firewall rules, user access controls, and simulated common attack scenarios to test detection and response capabilities. Monitored traffic with Wireshark and conducted vulnerability scans and basic penetration testing exercises.

Deployed a honeypot in a controlled lab environment to attract and analyze malicious traffic. Simulated vulnerable SSH and HTTP services, captured unauthorized access attempts, and identified brute-force patterns, automated bot activity, and geographic IP sources. Documented attack frequency and common exploitation techniques using behavioral log analysis.

Developed a custom Security Information and Event Management system using Python to aggregate, parse, and analyze security logs. Implemented rule-based detection logic, automated alerting for predefined security triggers, and normalized log structures for readability. Tested detection capabilities against simulated attacks from the homelab environment.