---
title: "Discussion on \"3 Wazuh detections I wrote and tested in my home lab\" | Hashnode"
description: "Discussion on \"3 Wazuh detections I wrote and tested in my home lab\". Three detections from my home SOC lab, each written by hand for Wazuh, tested against a real attack, and checked for false positives. For every one I followed the same loop: trigger the attack → find"
url: "https://hashnode.com/posts/3-wazuh-detections-home-lab/6af6ba5a9bafc90cbe817aa2"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [3 Wazuh detections I wrote and tested in my home lab](https://braindump.0x8r41nr07.xyz/3-wazuh-detections-home-lab?utm_source=hashnode&utm_medium=feed)

Three detections from my home SOC lab, each written by hand for Wazuh, tested against a real attack, and checked for false positives. For every one I followed the same loop: trigger the attack → find

2h ago · 6 min read · braindump.0x8r41nr07.xyz  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#wazuh](https://hashnode.com/tag/wazuh)
-   [#blueteam](https://hashnode.com/tag/blueteam)
-   [#detection-engineering](https://hashnode.com/tag/detection-engineering)

## Written by

[0x8r41nr07](https://hashnode.com/@0x8r41nr07)

@0x8r41nr07

  
[View profile](https://hashnode.com/@0x8r41nr07)

from Hacker to Creative Director and back

30 years in creative leadership (in the ad industry as a Creative Director) taught me one core skill: dissecting complex systems and finding the flaw before someone else does. My tech roots run back to 8-bit machine code on a C64 (yeah – 80s, baby!) Today, I’m combining that legacy hacker curiosity with modern threat detection and offensive security. BATTLE-TESTED LOGIC: Decades of high-pressure problem solving and systems analysis. HACKER MINDSET: I don't just follow playbooks; I reverse-engineer how the attack path actually works. CONTINOUS SKILL-UP: CompTIA Security+ certified (among other certs), building home labs, and constantly training for L1 ops to future Pentesting.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.
