Project
Build a Mini SOC
Set up a small lab, collect logs, and monitor activity.
Stand up a small home lab (a couple of virtual machines is enough), forward their logs to a free SIEM such as the Elastic Stack or Wazuh, and get comfortable reading what normal activity looks like before you try to spot abnormal activity.
Blue Team