Siem - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Nov 6

What tells you a Wazuh rule has gone quiet?

#wazuh #siem #detectionengineering #opensearch

7 min read

Nov 5

Wazuh snort decoder cuts the last octet off srcip and dstip (4.14.x)

#detectionengineering #wazuh #siem #security

3 min read

Nov 3

Wazuh active response: Cannot read 'srcip' from data

#wazuh #siem #security #windows

5 min read

Nov 2

Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

#wazuh #siem #security #linux

4 min read

Nov 1

Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

#wazuh #siem #security #detectionengineering

4 min read

Oct 31

Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

#wazuh #siem #security #opensearch

5 min read

Hugo | DevOps | Cybersecurity

Oct 28

Wazuh SIEM: Deploy Open Source Threat Detection

#wazuh #siem #threatdetection #devsecops

3 min read

Nov 4

Wazuh 5.0 rc2: eight things that still change for your 4.x custom rules

#wazuh #siem #security #opensource

4 min read

Hugo | DevOps | Cybersecurity

Oct 19

Wazuh SIEM: Open Source Threat Detection Deployment

#wazuh #siem #security #infrastructure

3 min read

Oct 14

Lightweight Log Analysis Tools Needed for Self-Hosted Environments to Enhance Security Without Full SIEM

#security #logging #selfhosted #siem

6 min read

jeffrey

Oct 9

Splunk, SIEM platforms and the risk of an unauthenticated management API

#splunk #cve202676268 #patroni #siem

2 min read

yutianle

Oct 9

Detection content as code: reviewing a change the way you review software

#security #detectionengineering #siem

2 min read

threataft

Oct 8

Splunk Patched an Unauthenticated RCE in Its Own SIEM — Here's What You Need to Know

#security #splunk #siem #infosec

2 min read

StarkMan

Sep 30

Wazuh: 17,587 Fingerprint Matches on the Security Platform Watching Everything

#wazuh #siem #securitymonitoring #dashboard

3 min read

Sep 2

I Used to Use Splunk. Here’s Why My Team Switched

#splunk #siem #security #observability

6 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.