Soc homelab- email security and edr logging

I am building a SOC homelab with virtual box to practice log analysis. Currently I have-

2 Windows hosts
1 Domain controller
1 splunk server (hosts have forwarders)
1 Kali Linux host



My goal is to simulate an enterprise network with logging (email security, edr, et)

Is there an open source email gateway that works well with Splunk? So far I’ve found Proxmox which integrates with clam av. My goal is to send phishing emails with payloads to the environment …

analysis box building controller cybersecurity domain domain controller edr email email gateway email security enterprise gateway goal homelab host kali kali linux linux log log analysis logging network open source practice security server soc splunk virtual windows