Browse categories
Explore
Fiverr Pro
English
$
USD
I will configure wazuh siem detection rules
Penetration Tester, DFIR, Cybersecurity Consultant
Cybersecurity practitioner providing Penetration Testing, DFIR, and GRC support. I work with web and network security, vulnerability assessment, digital forensics, incident analysis, security hardenin...
About this Gig
Need better Wazuh security alerts without unnecessary noise?
I will create, customize, and tune Wazuh SIEM detection rules to help you identify suspicious activity and improve security monitoring.
What I can help you with:
- Custom Wazuh XML detection rules
- SSH brute-force and suspicious login detections
- Firewall and endpoint log alerts
- Rule troubleshooting and alert tuning
- Basic false-positive reduction
- Rule testing using supplied log samples
What you will receive:
- 2, 5, or 8 rules depending on your package
- Wazuh XML configuration files
- Rule testing results
- Clear setup and implementation instructions
Why work with me?
I have hands-on SOC experience with Wazuh, ELK, threat intelligence, malware traffic investigations, and security monitoring.
Important: Packages cover simple rules for one already-parsed log source. New decoders, full installation, production deployment, and 24/7 monitoring are not included.
Please contact me with your Wazuh version, sample logs, and requirements before ordering.
Server:
Other
Operating system:
Linux
My Portfolio
Other Support & IT Services I Offer
FAQ
What do you need to get started?
I need your Wazuh version, sample logs, and a brief explanation of what you want to detect. If you already have rules that need fixing, please share their XML configuration and the issue you're experiencing.
What will I receive after the order is completed?
You will receive your customized Wazuh XML detection rules, testing results, and clear instructions for implementing them. The number of rules depends on your selected package.
Will you install and configure Wazuh on my server?
These packages focus on creating, fixing, and tuning detection rules for an existing Wazuh setup. Full installation, server configuration, and advanced integrations are available through a separately agreed custom offer.
Can you create rules for specific security threats?
Yes! I can develop rules for SSH brute-force attempts, suspicious logins, firewall events, and other security activities supported by your logs. Contact me with your requirements so I can confirm compatibility and scope.
Will you test the Wazuh rules before delivery?
Yes. I will test the rules against the agreed sample logs and provide the results. I also perform basic checks for incorrect matches. Final detection performance depends on your environment, log quality, and configuration.
