A virtual cybersecurity lab setup integrating Active Directory and Splunk for log monitoring and attack detection. Built using Windows Server, Ubuntu (Splunk Server), Windows 10 client, and Kali Linux attacker to simulate real-world security events like brute-force attacks and analyze them through Splunk dashboards.