Infrastructure / Lab
Proxmox Cluster Security Lab
A segmented multi-node security lab built to support SOC workflows, hostile-zone testing, malware research isolation, and controlled adversary simulation.
Read project →Gabriel Reis Santos Cybersecurity
Offense by
curiosity.
Defense by
design.
I pull systems apart to understand what holds them together.
Elsewhere
Follow the process.
Technical notes, hands-on labs, collaboration and the code behind my projects.
Selected work
Not just what I know.
What I build.
Projects with technical depth, clear tradeoffs and reproducible reasoning—across network infrastructure, security operations and interactive learning.
Infrastructure / Homelab
CyberLab — Proxmox Cyber Range
My segmented homelab and network-security test environment: Proxmox VE, OPNsense, Cisco SG300, WireGuard access and a sandbox extension.
Explore CyberLab →Interactive Learning / In development
Cyber Academy
A separate browser-based learning project with networking foundations, security simulations, attack paths and investigation exercises.
Explore Cyber Academy →Security Engineering
GabrielsMind Enterprise Defense
A public project focused on practical enterprise defense thinking, security architecture, and hands-on defensive workflows built to connect technical controls with real operational use.
View repository →Security Operations
My Home SOC Lab
A home SOC lab project built to explore monitoring, detection, logging, and investigation workflows in a practical environment designed for learning by doing.
View repository →Cyber Academy
You don’t really learn a system
until you break it.
Learn concepts, make mistakes in synthetic environments, investigate their consequences and test whether your fixes actually work.
Browser-based simulations, not live infrastructure or active exploitation.
01 EXPLORE Map assets and trust boundaries.
02 BREAK Introduce a controlled fault.
03 INVESTIGATE Follow packets, logs and evidence.
04 DEFEND Fix the configuration.
✓ VALIDATE: Does the fix preserve least privilege?
Reports & write-ups
Evidence over
assumptions.
Research, technical reporting, presentations and documented investigations. Built to be read, reviewed and questioned.
Document library
Research & reports
This section brings together reports, write-ups, threat notes and presentation material that are meant to be read as structured deliverables.
APT34 REPORT / THREAT INTELLIGENCE / PRESENTATIONS / DOCUMENTS
Live activity
Global threat telemetry
Third-party live threat map for situational context. Data is supplied by Kaspersky; it is not telemetry from my personal labs.