Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
wazuh
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Wazuh loses events three ways under load, and only one of them raises an alert
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 28
Wazuh loses events three ways under load, and only one of them raises an alert
#
wazuh
#
logging
#
security
#
linux
Comments
3
 comments
3 min read
One field path, two shapes: how Wazuh alerts get dropped with a 400 nobody sees
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 24
One field path, two shapes: how Wazuh alerts get dropped with a 400 nobody sees
#
wazuh
#
security
#
opensearch
Comments
Add Comment
2 min read
Wazuh custom rule never fires, and analysisd -t still exits 0: the file name decides
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 26
Wazuh custom rule never fires, and analysisd -t still exits 0: the file name decides
#
wazuh
#
detectionengineering
#
security
#
linux
1
 reaction
Comments
Add Comment
3 min read
Wazuh ms-graph: why Entra ID sign-ins never reach the indexer, and a one-processor fix
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 26
Wazuh ms-graph: why Entra ID sign-ins never reach the indexer, and a one-processor fix
#
wazuh
#
microsoft365
#
opensearch
1
 reaction
Comments
Add Comment
7 min read
Two coverage zeros, two different causes
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 17
Two coverage zeros, two different causes
#
wazuh
#
security
#
kubernetes
#
devops
Comments
Add Comment
3 min read
From Setup to Signal: Building My First Wazuh SIEM with Sysmon and Atomic Red Team
Christopher Bontempi
Christopher Bontempi
Christopher Bontempi
Follow
Aug 4
From Setup to Signal: Building My First Wazuh SIEM with Sysmon and Atomic Red Team
#
cybersecurity
#
wazuh
#
windows
#
beginners
Comments
Add Comment
9 min read
Your SIEM has never been asked a question it could fail
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 7
Your SIEM has never been asked a question it could fail
#
security
#
wazuh
#
devops
Comments
Add Comment
2 min read
A rule that is present, enabled, and silent: what Wazuh 92900 shows about coverage reports
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 6
A rule that is present, enabled, and silent: what Wazuh 92900 shows about coverage reports
#
security
#
wazuh
#
cybersecurity
Comments
Add Comment
2 min read
We replayed 24 ATT&CK techniques against a default Wazuh install. Three raised an alert.
Nguyen Dong
Nguyen Dong
Nguyen Dong
Follow
Sep 3
We replayed 24 ATT&CK techniques against a default Wazuh install. Three raised an alert.
#
wazuh
#
security
Comments
Add Comment
4 min read
Deploying and Validating a Wazuh SIEM with Atomic Red Team
Akindele Fasuba
Akindele Fasuba
Akindele Fasuba
Follow
Jul 28
Deploying and Validating a Wazuh SIEM with Atomic Red Team
#
cybersecurity
#
siem
#
wazuh
#
blueteam
Comments
Add Comment
8 min read
Building a Real SIEM Lab on a Mac Mini Fleet — What Actually Broke, and What I Learned Fixing It
Makita Tunsill
Makita Tunsill
Makita Tunsill
Follow
Jul 16
Building a Real SIEM Lab on a Mac Mini Fleet — What Actually Broke, and What I Learned Fixing It
#
wazuh
#
homelab
#
devops
#
security
Comments
Add Comment
4 min read
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account