In short, just give it access to your alerts.json, default rules, custom rules, archives.json, and magic happens.
Cloud Security & SOC portfolio with AWS labs, SIEM monitoring, and threat analysis. AWS | Wazuh | Splunk | Python
Community-built Wazuh knowledge base — custom detection rules, SOC simulations, integrations, compliance labs, and Wazuh 5.0 migration guides. Open to all levels.
WaZuh XDR and SIEM Enhancements
Wazuh is a free, open-source security platform that unifies SIEM and XDR. It is designed to protect endpoints, such as servers, virtual machines, and cloud workloads, by monitoring them for threats.
Web UI for tuning Wazuh 4.x `local_internal_options.conf` — generates ready-to-deploy config with matching OS-level hints (sysctl / limits.conf / systemd)
A custom SOC dashboard built on Wazuh for real-time security monitoring and incident investigation.
SOC Home Lab using Wazuh SIEM for detection and incident response
Automated Security Lab Infrastructure. A DevSecOps portfolio project demonstrating modular IaC using OpenTofu/Terraform on Proxmox, featuring automated verification, SIEM deployment, and hardening pipelines.
Enterprise-like home lab for hands-on cybersecurity and infrastructure practice.
mcp for Wazuh
Wazuh 4.9.1 modular deployment with Docker Compose and GitOps principles. Production-validated.
Improve model reasoning using Hint Tuning, a technique that constructs optimal chain-of-thought traces with minimal supervised fine-tuning data.
Add a description, image, and links to the wazuh-siem topic page so that developers can more easily learn about it.
To associate your repository with the wazuh-siem topic, visit your repo's landing page and select "manage topics."