Ravi Sir's Cyber Security Cards › Revision Cards
Wazuh Lab: See Your Own Attacks
Wazuh Lab: See Your Own Attacks Wazuh is a free SIEM/EDR. A central server collects data from small agents on each machine. A separate VM (4 GB+ RAM) on the host-only network as the Wazuh server. Agents on your target machines. You attack a lab machine and watch your own attack appear as alerts. Thi
Read card text
What this card says
What it is
Wazuh is a free SIEM/EDR. A central server collects data from small agents on each machine.
Lab setup
A separate VM (4 GB+ RAM) on the host-only network as the Wazuh server. Agents on your target machines.
Why it matters for security
You attack a lab machine and watch your own attack appear as alerts.
This is the best way to learn how a SOC sees things.
Learn more in the lesson: 31.4 Wazuh Lab: See Your Own Attacks