Lesson 2 of 11 · The SOC and Wazuh
Wazuh architecture: agent, manager, indexer and dashboard
Objective
Know which pieces make up a Wazuh installation, what each one does, and follow the full path of an event: from a line written in /var/log/auth.log on a server to the alert displayed in the analyst's browser. You will need this to install, troubleshoot and explain the platform.
This lesson is part of the full course
Unlock SOC Analyst with Wazuh: Detecting and Responding to Attacks to read every lesson, do the exercises, access the simulations and earn your certificate.
Already enrolled? Log in.