Wazuh Detection Engineering Lab

Built a SIEM and detection engineering lab using Wazuh and Sysmon, creating and validating custom detection rules, investigating alerts and mapping detections to MITRE ATT&CK.

• Wazuh
• Sysmon
• PowerShell
• MITRE ATT&CK
• Linux
• Windows
• VMware

Lab screenshots