SOC Analyst with Wazuh: Detecting and Responding to Attacks
Exit

Lesson 2 of 11 · The SOC and Wazuh

Wazuh architecture: agent, manager, indexer and dashboard

35 min Debian 12

Objective

Know which pieces make up a Wazuh installation, what each one does, and follow the full path of an event: from a line written in /var/log/auth.log on a server to the alert displayed in the analyst's browser. You will need this to install, troubleshoot and explain the platform.

This lesson is part of the full course

Unlock SOC Analyst with Wazuh: Detecting and Responding to Attacks to read every lesson, do the exercises, access the simulations and earn your certificate.

Already enrolled? Log in.