SIEM & Blue Team

The evaluation of Wazuh, a free open-source security platform, involved deploying it in a mock breach scenario involving MedSecure Logistics. The hands-on approach highlighted Wazuh’s effectiveness in detecting vulnerabilities, monitoring file integrity, and mapping attacks against MITRE ATT&CK. Key learnings included the importance of configuration and prompt detection to minimize breach impact.