kaitlinsullivan1991-crypto/GhostShell ? reverse-engineered prompt

Build me a clean, polished page for this GhostShell lab that explains a reverse shell C2 simulation and the gap between packet capture and SIEM visibility.

I want it to read like an educational security write up, with a clear intro, environment section, step by step attack walkthrough, network findings, and the Kibana results showing no relevant logs. Use the screenshots already in the repo and make the flow easy to follow for someone who is learning. Keep the tone professional and practical, and make the main takeaway obvious, that the traffic is visible in a PCAP but not in the current log based monitoring setup.

If you need to, look up current docs online for any best practices around presenting a lab report or static project page.