Wazuh training
Master Wazuh through practical labs covering detection rules, decoders, MITRE ATT&CK mapping, OSQuery, Sysmon, and Elastic. Develop custom rules, optimise alerts, hunt threats, and create resilient Wazuh architectures for effective security operations.

4 to 360 hours flexible workload
valid certificate in your country
What will I learn?
Wazuh Training offers focused, hands-on learning in designing, deploying, and optimising detection for real-world settings. Explore Wazuh architecture, agent installation, and core modules, then advance to decoders, bespoke rules, and playbooks for SSH, PowerShell, and web threats. Gain expertise in threat hunting, alert correlation, and response processes to minimise noise, detect genuine threats, and enhance security operations efficiently.
Elevify advantages
Develop skills
- Wazuh architecture design: deploy agents, managers, and key modules swiftly.
- Custom Wazuh rules: convert attack logic to XML, test, and deploy securely.
- Advanced log parsing: create decoders, normalise fields, and eliminate SIEM blind spots.
- Threat hunting with Wazuh: pivot using MITRE, OSQuery, Sysmon, and intelligence feeds.
- Incident response playbooks: triage, correlate alerts, and refine rules rapidly.
Suggested summary
Before starting, you can change the chapters and the workload. Choose which chapter to start with. Add or remove chapters. Increase or decrease the course workload.What our students say
FAQs
Who is Elevify? How does it work?
Do the courses have certificates?
Are the courses free?
What is the course duration?
What are the courses like?
How do the courses work?
What is the duration of the courses?
What is the cost or price of the courses?
What is an EAD or online course and how does it work?
PDF Course