If you a security engineer or an aspirant Security professional then Setting up a Wazuh home lab environment is an excellent way for SOC (Security Operations Center) analysts to gain hands-on experience in security monitoring, alerting, and response.

Custom Wazuh decoders and rules for UniFi Network devices. Parses CEF (Common Event Format) syslog events from UniFi OS and UniFi Network applications.

Open-source, test-backed Wazuh rules mapped to the NIST Cybersecurity Framework 2.0 — filling the gap between detection logic and compliance evidence.

Guide explaining how to deploy the entire Threat Intelligence pipeline inside Wazuh.

In short, just give it access to your alerts.json, default rules, custom rules, archives.json, and magic happens.

Small script centered on idea to keep repository with wazuh rules in git and update it automatically.

Enterprise-grade solution eliminating persistent MITRE technique lookup failures affecting thousands of Wazuh installations worldwide. Fixes both UUID compatibility and obsolete rule modernization.

Wazuh, Suricata, IDS, Threat Detection: Integrating Suricata with Wazuh to detect network reconnaissance activity and centralize security monitoring.

In Progress Project: A lab-based SOC simulation using Wazuh SIEM/XDR to detect real-world attack scenarios including database exfiltration, credential theft, and insider enumeration across a virtualized environment.

SOC Home Lab with Wazuh SIEM for security monitoring, SSH attack detection, and log analysis across Windows and Linux systems

A personal collection of Wazuh stuff

SIEM-based exfiltration detection - Wazuh + Suricata + SLIPS + MITRE ATT&CK

This project demonstrates end-to-end attack simulation and detection using Wazuh SIEM in a SOC environment.

Wazuh, Auditd, Threat Hunting | Detecting privileged command execution and endpoint activity through centralized log monitoring.

Multi-engine detection ruleset for the Caddy web server with 29 attack-mapped rules for Wazuh, Suricata, Snort 3, and Zeek, covering everything from path traversal to Log4Shell, with pcap-tested proof for every signature.

E24Cloud.com Wazuh rules for CloudTrail events

If you a security engineer or an aspirant Security professional then Setting up a Wazuh home lab environment is an excellent way for SOC (Security Operations Center) analysts to gain hands-on experience in security monitoring, alerting, and response.

An end-to-end cyber threat intelligence pipeline using Cowrie, Wazuh, and OpenSearch to capture, normalize, and visually track live SSH brute-force attacks.

A collection of detection engineering content, Wazuh customizations, CrowdStrike investigations, automation scripts developed during real-world security monitoring and incident response activities.