Structure Month‑by‑month progression

Month Theme Focus Link
Month 1 Foundations & Segregation Proxmox, OPNsense, AD, basic hardening View Month 1
Month 2 SIEM & Logging Wazuh/Elastic, agents, basic detections View Month 2
Month 3 SOC Workflows Attack simulation, detection engineering View Month 3
Month 4 Web & IDS Web apps, logs, Suricata/Snort View Month 4
Month 5 IR & Threat Hunting IR playbooks, hunts, reporting View Month 5
Month 6 Refinement & Interview Prep Specialization, hardening, portfolio View Month 6
Six-month Blue Team Transition Roadmap
Six‑month progression from platform fundamentals to SOC‑style workflows and specialization.