hiurydemunerdev/SOC-LabWazuh

      # SOC-Lab-Wazuh Blue Team SOC laboratory focused on threat detection, incident response and attack simulation using Wazuh SIEM. # Laboratory Architecture  This laboratory was built using: - Wazuh SIEM - Ubuntu Server - Kali Linux - VirtualBox - Fail2Ban - SSH - MITRE ATT&CK # Simulated Attack Scenarios - SSH brute force attack - Port scanning detection - IOC detection - Incident response - Attacker containment - Privilege escalation monitoring - Threat hunting - MITRE ATT&CK correlation # SOC Capabilities Demonstrated - SIEM Monitoring - Detection Engineering - Threat Hunting - Incident Response - Log Analysis - Linux Administration - Network Security - Attack Timeline Reconstruction # Dashboard Overview  The dashboard includes: - SSH authentication failures - MITRE ATT&CK events - Alert severity distribution - Incident timeline reconstruction - Event classification - Threat monitoring # Screenshots Screenshots available inside: /screenshots # Author Hiury Demuner