Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions docs/cybersecurity/Blue Team/Introduction to Blue Team.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,11 +40,13 @@ The Blue Team also manages an email infrastructure based on Microsoft 365 Exchan

Before you start working on anything, read through the Onboarding section. This explains some more concepts about Wazuh and how you can access it, along with Docker fundamentals. Understanding Docker is particularly important, as most services are setup in Docker containers.

Afterwards, have a look at the Production section. This includes guides for all the services mentioned above and how you can maintain them.
Afterwards, have a look at the Production and Wazuh background section. They include guides, maintanance and information for all the services mentioned above.

Finally, the Research section includes things that some team members have worked on in the past. This includes pure research and how-to installation guides for things tested on local VMs (not implemented).

After you've read through these sections, have a think about what you'd like to work on, and discuss this with the team.
After you've read through these sections, have a think about what you'd like to work on, and discuss this with the team.

Additionally, please review the Cyber Training module. The training will provide you with the knowledge and skills necessary to keep yourself safe in the Redback Operations environment. Navigate to https://d2l.deakin.edu.au/d2l/home and search for Redback to find the Cloud Deakin Redback page. If you don't have permission, contact one of your leaders. The module consists of information on cyber security practices paired with a quiz at the end of each module. You will need to go through them all and complete the final quiz at the end.



Expand Down
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
---
id: wazuh-background
title: Wazuh Background
id: wazuh-overview
title: Wazuh Overview
sidebar_position: 1
tags: [blue team, wazuh, onboarding]
---

# Wazuh Background
# Wazuh Overview

## What is Wazuh?
Wazuh is an open-source SIEM tool (Security Information and Event Management).
Expand Down Expand Up @@ -84,3 +84,10 @@ For example:


This is not required for Wazuh access but may be needed for backend tasks.

## Understanding Wazuh
If you are interested in learning more about Wazuh, please head over to the Wazuh background section, where we cover more on why we chose Wazuh, how to install Wazuh, and guides on how to use Wazuh.




Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@
"position": 3,
"link": {
"type": "generated-index",
"description": "Email Infrastructure & Security Documentation"
"description": "Email Infrastructure & Security documentation"
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@
"position": 110,
"link": {
"type": "generated-index",
"description": "Wazuh Enhancements Documentation"
"description": "Wazuh Enhancements documentation"
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@
"position": 80,
"link": {
"type": "generated-index",
"description": "CVE Threat Automation"
"description": "CVE Threat Automation documentation"
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"label": "Cowrie",
"position": 102,
"link": {
"type": "generated-index",
"description": "Cowrie implementation"
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"label": "ELF Stack",
"position": 105,
"link": {
"type": "generated-index",
"description": "ELF Stack setup documentation"
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@
"position": 11,
"link": {
"type": "generated-index",
"description": "Graylog documentations"
"description": "Graylog documentation"
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@
"position": 104,
"link": {
"type": "generated-index",
"description": "MISP deployment documentations"
"description": "MISP deployment documentation"
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"label": "Pi-Hole",
"position": 13,
"link": {
"type": "generated-index",
"description": "Pi-Hole documentation"
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,6 @@
"position": 12,
"link": {
"type": "generated-index",
"description": "Wazuh MISP Integration documentation"
"description": "Wazuh MISP integration documentation"
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"label": "Wazuh Installation",
"position": 6,
"link": {
"type": "generated-index",
"description": " Documentation on Wazuh installation "
}
}
Original file line number Diff line number Diff line change
@@ -0,0 +1,8 @@
{
"label": "Wazuh background",
"position": 5,
"link": {
"type": "generated-index",
"description": " Background information on Wazuh "
}
}
Loading