Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
wazuh
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Wazuh custom rule never fires, and analysisd -t still exits 0: the file name decides
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 26
Wazuh custom rule never fires, and analysisd -t still exits 0: the file name decides
#
wazuh
#
detectionengineering
#
security
#
linux
Comments
Add Comment
3 min read
Wazuh ms-graph: why Entra ID sign-ins never reach the indexer, and a one-processor fix
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 26
Wazuh ms-graph: why Entra ID sign-ins never reach the indexer, and a one-processor fix
#
wazuh
#
microsoft365
#
opensearch
Comments
Add Comment
7 min read
One field path, two shapes: how Wazuh alerts get dropped with a 400 nobody sees
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 24
One field path, two shapes: how Wazuh alerts get dropped with a 400 nobody sees
#
wazuh
#
security
#
opensearch
Comments
Add Comment
2 min read
Two coverage zeros, two different causes
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 17
Two coverage zeros, two different causes
#
wazuh
#
security
#
kubernetes
#
devops
Comments
Add Comment
3 min read
From Setup to Signal: Building My First Wazuh SIEM with Sysmon and Atomic Red Team
Christopher Bontempi
Christopher Bontempi
Christopher Bontempi
Follow
Aug 4
From Setup to Signal: Building My First Wazuh SIEM with Sysmon and Atomic Red Team
#
cybersecurity
#
wazuh
#
windows
#
beginners
Comments
Add Comment
9 min read
Your SIEM has never been asked a question it could fail
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 7
Your SIEM has never been asked a question it could fail
#
security
#
wazuh
#
devops
Comments
Add Comment
2 min read
A rule that is present, enabled, and silent: what Wazuh 92900 shows about coverage reports
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 6
A rule that is present, enabled, and silent: what Wazuh 92900 shows about coverage reports
#
security
#
wazuh
#
cybersecurity
Comments
Add Comment
2 min read
We replayed 24 ATT&CK techniques against a default Wazuh install. Three raised an alert.
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 3
We replayed 24 ATT&CK techniques against a default Wazuh install. Three raised an alert.
#
wazuh
#
security
Comments
Add Comment
4 min read
Deploying and Validating a Wazuh SIEM with Atomic Red Team
Akindele Fasuba
Akindele Fasuba
Akindele Fasuba
Follow
Jul 28
Deploying and Validating a Wazuh SIEM with Atomic Red Team
#
cybersecurity
#
siem
#
wazuh
#
blueteam
Comments
Add Comment
8 min read
Building a Real SIEM Lab on a Mac Mini Fleet — What Actually Broke, and What I Learned Fixing It
Makita Tunsill
Makita Tunsill
Makita Tunsill
Follow
Jul 16
Building a Real SIEM Lab on a Mac Mini Fleet — What Actually Broke, and What I Learned Fixing It
#
wazuh
#
homelab
#
devops
#
security
Comments
Add Comment
4 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account