I will write custom wazuh rules and decoders for firewall, edr, and server logs

Already running Wazuh but missing useful detections or parsing for a log source? I can help create or tune custom Wazuh rules and decoders against the event samples and detection goals you provide.

Work can include field extraction, rule conditions and levels, alert grouping, false-positive review against supplied samples, and MITRE ATT&CK mapping where it fits. Each change should be tested against representative events and delivered with notes so your team can review and maintain it.

Please message me first with the log source, Wazuh version, redacted sample events, expected fields, and the behavior you want to detect. Vendor-specific formats vary; I will confirm feasibility before accepting. This Gig does not guarantee detection of every attack or replace threat hunting, incident response, or a security assessment.