Wazuh training
Gain expertise in Wazuh through practical labs covering detection rules, decoders, MITRE ATT&CK mapping, OSQuery, Sysmon, and Elastic integration. Learn to build custom rules, fine-tune alerts, hunt threats, and create strong Wazuh architectures for effective security operations in real environments.

flexible workload of 4 to 360h
valid certificate in your country
What will I learn?
This hands-on Wazuh Training course teaches you to design, deploy, and optimise detection systems for real-world use. Explore Wazuh architecture, agent installation, and core modules. Master creating decoders, custom rules, and playbooks for threats like SSH, PowerShell, and web attacks. Build skills in threat hunting, alert correlation, and response to minimise noise, detect genuine threats, and enhance security operations efficiently.
Elevify advantages
Develop skills
- Design Wazuh architecture: deploy agents, managers, and key modules quickly.
- Create custom Wazuh rules: convert attack logic to XML, test, and deploy safely.
- Master advanced log parsing: build decoders, normalize fields, and eliminate SIEM blind spots.
- Conduct threat hunting with Wazuh: pivot using MITRE, OSQuery, Sysmon, and intel feeds.
- Develop incident response playbooks: triage, correlate alerts, and tune rules rapidly.
Suggested summary
Before starting, you can change the chapters and the workload. Choose which chapter to start with. Add or remove chapters. Increase or decrease the course workload.What our students say
FAQs
Who is Elevify? How does it work?
Do the courses have certificates?
Are the courses free?
What is the course workload?
What are the courses like?
How do the courses work?
What is the duration of the courses?
What is the cost or price of the courses?
What is an EAD or online course and how does it work?
PDF Course