Creating Custom Detection Rules in Wazuh
Learn how custom Wazuh detection rules transform raw security events into useful alerts, including rule testing, Windows event monitoring, severity tuning, and alert suppression.
-
-
SOC Level 2 Workflow – Room Summary
Final Thoughts This was one of my favorite TryHackMe rooms so far because it focused on an area of cybersecurity that I genuinely enjoy: log analysis and incident triage. Rather than simply acknowledging alerts, the room demonstrates how a SOC Level 2 analyst investigates security incidents by building timelines, analyzing evidence, validating suspicious activity, and…