DEV Community

Nguyen Dong profile picture

Nguyen Dong

I write and test Wazuh rules, decoders and ingest pipelines for your exact version. Fixed scope, paid only after it runs on your cluster.

Joined Joined on  Personal website https://vct.atkvn.com/#fix-pack github website
Wazuh custom rule never fires, and analysisd -t still exits 0: the file name decides
xuxu298 profile

Wazuh custom rule never fires, and analysisd -t still exits 0: the file name decides

#wazuh #detectionengineering #security #linux
Comments
3 min read

Want to connect with Nguyen Dong?

Create an account to connect with Nguyen Dong. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Wazuh ms-graph: why Entra ID sign-ins never reach the indexer, and a one-processor fix
xuxu298 profile

Wazuh ms-graph: why Entra ID sign-ins never reach the indexer, and a one-processor fix

#wazuh #microsoft365 #opensearch
Comments
7 min read
One field path, two shapes: how Wazuh alerts get dropped with a 400 nobody sees
xuxu298 profile

One field path, two shapes: how Wazuh alerts get dropped with a 400 nobody sees

#wazuh #security #opensearch
Comments
2 min read
All 4052 if_sid anchors in the Wazuh ruleset resolve, so that's not why your rule is silent
xuxu298 profile

All 4052 if_sid anchors in the Wazuh ruleset resolve, so that's not why your rule is silent

#security #devops #opensource #linux
1
Comments 2
2 min read
Sixteen detection vendors, one TLS check, and nobody is near the 47-day floor
xuxu298 profile

Sixteen detection vendors, one TLS check, and nobody is near the 47-day floor

#security #tls #devops #sysadmin
Comments 2
3 min read
Two coverage zeros, two different causes
xuxu298 profile

Two coverage zeros, two different causes

#wazuh #security #kubernetes #devops
Comments
3 min read
I scanned 37 security job posts tonight. Zero were posted in the last 24 hours.
xuxu298 profile

I scanned 37 security job posts tonight. Zero were posted in the last 24 hours.

#security #freelance
Comments
2 min read
Your SIEM has never been asked a question it could fail
xuxu298 profile

Your SIEM has never been asked a question it could fail

#security #wazuh #devops
Comments
2 min read
A rule that is present, enabled, and silent: what Wazuh 92900 shows about coverage reports
xuxu298 profile

A rule that is present, enabled, and silent: what Wazuh 92900 shows about coverage reports

#security #wazuh #cybersecurity
Comments
2 min read
We replayed 24 ATT&CK techniques against a default Wazuh install. Three raised an alert.
xuxu298 profile

We replayed 24 ATT&CK techniques against a default Wazuh install. Three raised an alert.

#wazuh #security
Comments
4 min read
In April, banking was the least post-quantum-ready sector we measured. It is now second from the top.
xuxu298 profile

In April, banking was the least post-quantum-ready sector we measured. It is now second from the top.

#postquantum #cryptography #security #tls
Comments
4 min read
HIDS + NIDS: Why Your SMB Needs Both (And How We Integrated Wazuh + Suricata in a Single Platform)
xuxu298 profile

HIDS + NIDS: Why Your SMB Needs Both (And How We Integrated Wazuh + Suricata in a Single Platform)

#cybersecurity #wazuh #suricata #startup
2
Comments
4 min read
loading...