Workshop | Using and Understanding Wazuh
The ongoing digitalization and increasing interconnection of systems are leading to a steady rise in security-relevant events and log data. Effective monitoring, correlation, and analysis of this data require a centralized, scalable, and rule-based SIEM system (Security Information and Event Management). But what exactly is a “SIEM”? And how can Wazuh be implemented and used to monitor my environment?
Agenda:
- What is SIEM?
- Wazuh architecture
- Installation of the Wazuh stack
- Processing data in Wazuh (rules and decoders)
- Visualizing data in Wazuh (dashboards and reports)
Speakers
-
Felix NirsbergerNETWAYS Managed Services GmbHFelix Nirsberger is a Security Engineer at NETWAYS Web Services. He designs and builds security architectures for NWS’s multi-tenant OpenStack platform, identifies and fixes vulnerabilities, and keeps the existing infrastructure running securely. In his day-to-day work, he relies on open-source tools such as Wazuh, Falco, and Suricata, covering everything from rule development and alert triage to tuning against false positives.
-
Christian StücklNETWAYS Professional Services GmbHChristian Stückl is a Consultant at NETWAYS Professional Services. There, he supports customers in designing and implementing open-source observability solutions, with a focus on log management and SIEM.