3:44
What a home SOC does NOT give you
Cultura DevOps
3:22
What it costs: RAM, disk and retention
3:51
9.3 GB of catalog and zero results: four days with a module down
3:23
SCA against CIS: how bad your machine is, with a score
3:50
Active response: letting it block the IP on its own, and why that's scary
4:41
Windows: the agent and Sysmon, where the good telemetry is
3:07
10 SSH attempts and 167 alerts: only one matters
3:48
FIM: who touched that file and when
3:29
Your first Wazuh rule: the decoder, the broken XML, and the file that no one read
5:48
The agent said "Active" and it was lying: your first Wazuh agent
4:46
One line of text, 3 phases: how Wazuh decides there is an alert
5:57
Docker said «Up» for four days and the dashboard was dead (Wazuh on Docker)
3:30
1,313 alerts and nothing happened: Wazuh rule levels and the noise
3:43
Wazuh: 752 alerts before anyone broke in (and what a real SOC is)
