Author: Nikola Marković
Status: ongoing
Last updated: 2025-10-16
Repo: https://github.com/Oligo12/cyber-projects/
Email: nikola.z.markovic@pm.me
LinkedIn: https://www.linkedin.com/in/nikolazmarkovic/

Two ongoing, separate labs:

• malware-analysis/ - isolated lab for learning manual Windows malware analysis (e.g., ProcMon, Wireshark). I document behaviors/TTPs per sample.
• detection-lab/ - small Sentinel-focused lab where I drop known components from the analyses to search logs and prototype KQL detections (plus basic response). It’s separate because AMA/agents can break after VM snapshot restores; this lab is manually remediated and kept "good enough" for hunting known behaviors.
• legacy/Legacy-Sentinel-Lab - my first Sentinel-only lab; the initial encounter with Sentinel.

Current samples analyzed: Agent Tesla, QuasarRAT, WannaCry.

License: The Unlicense (public domain).