Security Operations
SOC & SIEM Lab: Wazuh, Graylog, OpenCTI and MISP
A self-hosted SOC stack: Wazuh for endpoint detection and response, Graylog for log aggregation, OpenCTI with MISP for threat intelligence, and Grafana for unified visualization.
Project Overview
A full security operations stack, designed, deployed and actively maintained on self-hosted infrastructure.
Implementation Process
- Wazuh for endpoint detection and response.
- Graylog for centralized log aggregation.
- OpenCTI paired with MISP for threat intelligence collection and correlation.
- Grafana tying the data together in unified dashboards.
Benefits
- One place to detect, investigate and enrich security events.
- Threat intelligence correlated with real telemetry.
Contents
Related Projects
Interested in more security projects?
Explore my other security implementations and solutions.
View All Projects