Homelabbing Part 4: Setting up my Blue team cybersecurity stack - Implementing Network monitoring and threat detection

Hi. Today I am going to set up a security stack, well what is a security stack? By my definition, a security stack is a bundle of services to combat cyber attacks and keep a system defensiven and you might be asking, why do I need this? Before exporting something to the internet (which I intend to do) I need to have some kind of security in place so I don’t get DDoS-ed or allow an unauthorized attack to my systems.

For this we are going to set up crowdsec + zeek in a visualization tool like grafana so we could take a better look with a clearer vision on what is happening and why. We may set up alerts as notifications on a telegram bot to get notified when someone tries to cause damage and if something seems off investigate the network packets to get a sharper idea.