shasaank-s/wazuh-soc-home-lab

This repository documents a Wazuh SOC home lab rather than implementing software. Its main workflow is Windows endpoint telemetry reaching an Ubuntu Wazuh Manager, where events are analyzed and file events are enriched with VirusTotal; Kali Nmap and Hydra activity provides adversary emulation for detection validation. The README also describes FIM and the Wazuh Dashboard. No source excerpts or configuration files were provided, so the graph reflects documented relationships only; README paths identify the evidence, not implementation code.