3:44
What a home SOC does NOT give you
Cultura DevOps
3:22
What it costs: RAM, disk and retention
3:51
Vulnerabilities: the CVE detector and the noise it brings
3:23
SCA against CIS: how bad your machine is, with a score
3:50
Active response: letting it block the IP on its own, and why that's scary
4:41
Windows: the agent and Sysmon, where the good telemetry is
3:07
SSH brute force: from a stray attempt to the alert that matters
3:48
FIM: who touched that file and when
3:29
Write your first rule and your decoder
5:48
Your first agent and the first event that arrives
4:46
One line of text, 3 phases: how Wazuh decides there is an alert
5:57
Docker said «Up» for four days and the dashboard was dead (Wazuh on Docker)
3:30
1,313 alerts and nothing happened: Wazuh rule levels and the noise
3:43
Wazuh: 752 alerts before anyone broke in (and what a real SOC is)
