Wazuh, n8n and automation for security.
A technical session to understand how to enrich alerts, add context and assist the analysis of an SOC Tier 1 with automation, OSINT and artificial intelligence.
What you're gonna find in the session.
Concepts, architecture and a demonstration aimed at improving the daily work of the analyst.
- 01
Wazuh detection
How to transform safety telemetry into useful signals for analysis.
↗ - 02
Flows with n8n
Automation of repetitive tasks to enrich and route alerts.
↗ - 03
OSINT and artificial intelligence
Additional context for indicators of engagement and assistance to the analyst.
↗ - 04
Priority for risk
Criteria for a SOC Tier 1 to focus attention where there is greater impact.
↗ - 05
Practical demo
A route applied by integration and its functioning within the process.
↗
A guide for equipment that wants to automate with judgment.
Especially useful if you already work with Wazuh, you are evaluating n8n or need to reduce manual tasks in the triage.
Let's talk about Wazuh, automation and operation of your SOC.
We review coverage, sources and risks to propose a clear scope, integrated with your technological reality.