SIEM

  1. Bridging Lab to the Cloud with Site-to-Site VPN
  2. Developing Wazuh Decoders and Rules for Lab Firewall
  3. Endpoint Monitoring with Wazuh Agent
  4. Incident Analysis - DNS Exfiltration
  5. Incident Analysis - Remote Code Execution (RCE)