Wazuh

  1. Bridging Lab to the Cloud with Site-to-Site VPN - Deployed a centralized Wazuh SIEM manager in AWS to aggregate endpoint telemetry over a secure WireGuard tunnel.
  2. Developing Wazuh Decoders and Rules for Lab Firewall - Developed custom PCRE2 decoders to parse raw firewall logs and created behavioral threat detection rules mapped to the MITRE ATT&CK framework.