SIEM

  1. Bridging Lab to the Cloud with Site-to-Site VPN - Deployed a centralized Wazuh SIEM in AWS to collect and monitor telemetry from the lab infrastructure.
  2. Developing Wazuh Decoders and Rules for Lab Firewall - Used Wazuh to parse custom firewall logs and mapped behavioral detection rules to the MITRE ATT&CK framework to identify potential indicators of compromise.