// Security Lab & Blog — mrmeomeo.codes
The working notebook of Tung Nguyen (MrMeoMeo) — where lab work becomes public knowledge: security writeups, hands-on lab exercises and short field notes from the SOC side of the fence. The shelves are built; the first entries are on the way.
// 01 — Writeups
Full-length breakdowns: SOC detection walkthroughs, threat mapping notes tied to real adversary behavior, and network traffic analysis — what fired, what didn't, and why.
This card is a placeholder that shows how a published writeup will look in this list — category tag, title and a short summary. It is not a real article: no findings, no results, nothing to click yet. It will be replaced by the first actual writeup when it lands.
First writeups coming soon — the first detection breakdown is being prepared in the lab.
// 02 — Labs
Reproducible, hands-on exercises from the range — built to be broken, observed and rebuilt. Lab reports will be published here as exercises are completed and written up.
SIEM rules, log sources and alert tuning — exercises that start with raw events and end with a detection an analyst can trust.
Adversary emulation runs against a monitored range: attack, watch what the blue side sees, then close the gaps the run exposed.
Packet captures and flow analysis — hunting beaconing, protocol anomalies and lateral movement in controlled traffic.
No lab reports published yet — exercises are running, write-ups follow.
// 03 — Notes
Short, dated observations that don't need a full writeup: a query that worked, a mapping insight, a tool behavior worth remembering — the margin notes of day-to-day security work.
Nothing posted yet — the first field notes will land here as the lab work starts publishing.
// 04 — Connect
The lab is the notebook — the person is over here.