1.1 "Teaser" overview

After making the experiments to be able to identify the different TTPs on a Wazuh SIEM, I discovered that everything is persistence in finding the problem because after checking every single step, you will be able to find the problem and make a secure network with one of the most important skills, which will be monitoring a network and adapting the SIEM to any hacking technique to always have a complete view of your network. The second thought will be to, after making a modification and installing anything on your system, restart it because it won't work until it's restarted and check the connection with the SIEM and the agent's endpoint. The third thought will be to follow the steps in the direction in which you won't get lost. For example, deploy the agent to the endpoint, and next install the Siem agent.…