SIEM solution wazuh

???? ??? ??????? – ????? ????

I wanted to apply what I have learned in SOC so far in a hands-on way instead of focusing only on theory.

I simulated multiple failed login attempts on my Windows

The event was generated on my Windows endpoint, sent to Wazuh, and then displayed and analyzed in the SIEM dashboard.