Watch later v2

Currently Playing: 20 God-Tier Cybersecurity Projects That Will Get You Hired

Need some direct guidance to break in cyber? https://skool.com/madhat Join the Mad Hat community: https://discord.com/invite/BUzZY2sR4J Stop building generic cybersecurity projects that recruiters ignore. Learn how to create technical projects that prove your skills. 1. Home SIEM + writeup Full SOC build (Wazuh + Suricata + pfSense + Sysmon, PDF guide): https://github.com/marxgoo/Wazuh-SOC-Lab Beginner OVA walkthrough w/ screenshots: https://github.com/UsmanPrime/Wazuh-Setup Official docs: https://documentation.wazuh.com 2. Contribute a detection rule to SigmaHQ The repo + CONTRIBUTING guide: https://github.com/SigmaHQ/sigma Contributing checklist: https://sigmahq.io/docs/digging-deeper/contributing.html Rule Creation Guide: https://github.com/SigmaHQ/sigma/wiki/Rule-Creation-Guide 3. Honeypot + dashboard Cowrie + Wazuh integration: https://medium.com/@maryamliaqat4583/building-a-cowrie-ssh-honeypot-with-wazuh-integration-a-hands-on-soc-lab-guide-d89b2430076d T-Pot all-in-one platform guide: https://github.com/telekom-security/tpotce Cowrie official: https://github.com/cowrie/cowrie 4. Portfolio website Github… Build your own… I made a silly video on it: https://youtu.be/81NguENBjws 5. Reverse-engineer malware → YARA/Sigma rule Ghidra (official, NSA): https://github.com/NationalSecurityAgency/ghidra YARA docs: yara.readthedocs.io 6. Phishing email analysis lab TryHackMe Phishing rooms (part of SOC L1 path) [Standard project — point to any current "analyze phishing headers" walkthrough; low risk] 7. Detection-as-Code (rules in Git + CI/CD) Quick Guide: https://blog.runreveal.com/runreveal-detection-cicd-guide/ 8. LLM prompt-injection / red-team ✅ strongest resource set Official tool: https://github.com/NVIDIA/garak Beginner repo: https://github.com/chinmayajoshi/LLM-Red-Teaming-with-Garak Tool comparison (Promptfoo/PyRIT/Garak): https://bestaiweb.ai OWASP LLM Top 10: https://genai.owasp.org 9. STIX/TAXII threat-intel automation My old video on it: https://youtu.be/f7k1FWMC8g4 MISP (official): https://github.com/MISP/MISP OpenCTI (official): https://github.com/OpenCTI-Platform/opencti 10. From-scratch security tool 11. Cloud misconfiguration hunt (CSPM) Prowler (open-source CSPM, AWS/Azure/GCP): github.com/prowler-cloud/prowler ScoutSuite: github.com/nccgroup/ScoutSuite 12. Least-privilege IAM design Mad Hat Labs...idk I'll find some more. 13. GRC gap assessment NIST CSF 2.0 (official): nist.gov/cyberframework 14. Active Directory attack-and-defend GOAD (Game of Active Directory, open-source vulnerable lab): https://github.com/Orange-Cyberdefense/GOAD HackTheBox or TryHackMe AD paths 15. OAuth consent-phishing in Entra ID Mad Hat Labs...teehee... 16. Network traffic / C2 in PCAP Malware-Traffic-Analysis.net (real PCAP exercises): https://malware-traffic-analysis.net Wireshark official: https://wireshark.org 17. IR playbook + tabletop CISA tabletop exercise packages (official, free): https://cisa.gov/resources-tools/services/cisa-tabletop-exercise-packages Incident response playbook templates: https://github.com/counteractive/incident-response-plan-template 18. Build your own vuln scanner Check out my previous video for inspiration: https://youtu.be/I9rvl-x0RQI 19. SOAR automation playbook Tines (free Community edition, has templates): https://tines.com Shuffle (open-source SOAR): https://github.com/Shuffle/Shuffle 20. Responsible disclosure HackerOne / Bugcrowd disclosure guidelines: https://www.hackerone.com/terms/disclosure-guidelines https://docs.bugcrowd.com/researchers/disclosure/disclosure/ Disclose IO (responsible disclosure framework + templates): https://disclose.io Most tutorials lead to cookie-cutter portfolios that offer zero competitive advantage. This video breaks down how to select cybersecurity projects that actually demonstrate practical, high-value skills. We focus on technical depth to help you stand out during hiring processes. We assess specific project types including LLM prompt injection and network analysis to determine their real-world hireability. You will learn how to evaluate if a project is worth your time or just busy work. We also cover the practical application of SigmaHQ rules and malware analysis to ensure your work aligns with industry standards. By filtering out low-effort tutorials, you can focus on building a cybersecurity portfolio that highlights your problem-solving abilities. Use this guide to prioritize projects that provide tangible evidence of your technical expertise to potential employers. Subscribe for cybersecurity career advise and breakdowns and comment which project topic you might want to see a full tutorial on. #cybersecurity #education #hacking