Become an ambassador

"Building a SOC solution with Wazuh is what made blue team operations click for me. It pushed me to understand raw logs at the source, turn them into detection patterns that actually make sense, and automate the steps that take an alert from “noise” to “something an analyst can act on.” What I like most about Wazuh is that it gives you full visibility and control, so you can build real detections, tune them over time, and keep improving without being locked into a black box."

Ayman Wadi
Morocco

SOC Engineer
 /  Mercure

I’m passionate about Wazuh as an open-source project that brings together the core capabilities needed for effective security operations: log collection, analysis, detection, alerting, visibility, integrations, and automation. What stands out to me is how much power it can offer when it is deeply customized around an organization’s environment and security priorities.

My work focuses primarily on SIEM engineering and detection engineering, It starts by understanding data sources, building and tuning rules and decoders, reducing noise, and ends by turning security events into actionable detections. Through custom rules, decoders, integrations, dashboards, and enrichment workflows, I have worked to make Wazuh a more capable and tailored detection engine.

I enjoy exploring how far Wazuh can be pushed beyond its default setup, transforming it into a practical and powerful platform for real-world monitoring, investigation, and threat detection.

Programming languages
  • JavaScript
  • Python
Operating systems
  • Linux
  • Windows
Technologies
  • Cybersecurity
  • Docker
  • Wazuh
Available for
  • Blogposts
  • Community support
  • Social Media
  • Testing
  • Webinars
  • Writing tutorials