Does anyone have experience or feedback regarding use of Wazuh as a SIEM, specifically for a small (~50 person) company and with all infrastructure in the public cloud?

Threat Intelligence & Incident Response Secure Code & Automation (DevSecOps)

2k views3 Comments

Sort by:

CISO in Education2 months ago

The new versión, 4.12 es PERFECT!!! I have 300 Devices....

CEO, MSSP - High Assurance Cybersecurity SOC in Services (non-Government)3 years ago

We've used stable versions in the past... takes a little bit of getting used to. For a small business well worth it if you have someone who can spend some time understanding it. At the end of the day it is a SIEM and will need nurturing and care.

CTO in Transportation3 years ago

Yes we are using it. We are using aws and we have been using Wazuh for close to 7 years now. No issues at all.

Content you might like

Ukraine’s CERT-UA recently exposed LAMEHUG malware that uses Large Language Models to generate attack commands in real-time via legitimate AI services (Hugging Face API). What is your organization’s current readiness level for AI-powered cyber threats?

A) Fully Prepared - We have AI-specific threat detection, monitoring of AI API usage, and updated incident response procedures for AI-assisted attacks

B) Partially Prepared - We’re monitoring some AI services and have basic awareness, but lack comprehensive AI threat modeling and detection capabilities67%

C) Early Assessment - We’ve identified the risk and are evaluating AI security frameworks (MITRE ATLAS, CSA MAESTRO, OWASP AI guides) but haven’t implemented controls yet33%

D) Unprepared - We haven’t specifically addressed AI-powered threats in our security strategy or implemented AI-focused monitoring

View Results

How are you making sure the security team has visibility into social engineering attempts on helpdesk staff, especially with attacks using voice impersonation or other deepfake techniques?

I'm looking to go for the Certified CISO certification & training as I'm an aspiring CISO. Any recommendations and additional certifications that I should be doing along with that? I already have CISSP.

Are you excited about going back into the office?

Yes - I can't wait to see my coworkers. It will help with my day-to-day job role.68%

No - I like the established routine I made during the COVID-19 pandemic and I'm not interested in changing that.31%