inflearn logo

One-Pass SIEM Deployment: Getting Started with Threat Hunting Using Wazuh and ELK (Basics)

From Theory to Practice: Demonstrating Core Security Expertise Through Wazuh+ELK SIEM Deployment Design and operate a threat hunting system firsthand—the core of security monitoring. Through hands-on exercises based on real-world attack scenarios, become a professional security engineer capable of delivering immediate results in the field.

(4.8) 11 reviews

159 learners

Level Basic

Course period Unlimited

Linux
Linux
Microsoft Windows
Microsoft Windows
security
security
wazuh
wazuh
ossec
ossec
Linux
Linux
Microsoft Windows
Microsoft Windows
security
security
wazuh
wazuh
ossec
ossec

What you will gain after the course

  • Building a Real Threat Hunting System: Systematically practice how to build your own threat hunting system using a combination of Wazuh and ELK (SIEM).

  • Mastering Various Integration Methods: Explore the differences between Agent and Agentless approaches and how to use each, then implement them in practice.

  • Threat detection through real-world attack scenarios: In this hands-on exercise, you will simulate and detect actual attacks through three scenarios: ransomware, web shells, and website defacement.

  • How to Use Sysmon & Suricata: Practice strengthening the detection capabilities of a threat hunting system using the Sysmon and Suricata tools.

  • Application in Real-World Security Environments: Explore in depth how to build and operate systems in real-world security environments so you can apply what you learned in the course on the job.

🎯 Why is it essential to understand threat hunting? 🎯


🔍 What is "threat hunting"?

Unlike traditional reactive security monitoring, threat hunting is a proactive security approach that identifies and analyzes security threats in advance, enabling a response before an attack occurs. It involves security experts continuously monitoring systems to uncover previously undetected threats before they can cause harm.


💡 Why is threat hunting important?

Cyberattacks are becoming increasingly sophisticated with each passing day. It is becoming difficult to counter these sophisticated attacks using only traditional security solutions. For this reason, security professionals must proactively identify, analyze, and respond to threats. Threat hunting is the optimal methodology for meeting these needs.


🔐 Wazuh & ELK - An Invitation to the New World of Security!

  • You will learn how to integrate Wazuh with tools such as Sysmon, Suricata, and VirusTotal and use them.


Wazuh and ELK are tools that can make this threat hunting process more efficient, and have become essential tools for threat hunting experts. Through this course, you will learn how to use Wazuh and ELK, enabling you to develop proactive security response capabilities.


🚨 Then how is it different from general security monitoring?

Traditional security monitoring primarily focuses on detecting and responding to known threats, whereas threat hunting requires the ability to discover and respond to new, previously unknown threats. This goes beyond simply blocking attacks—it refers to a level of security monitoring that identifies the causes and origins of attacks and prevents them before they occur.


✨ Are you ready to take your cybersecurity skills to the next level?

This course is perfect for taking that first step. We invite you into the world of threat hunting using Wazuh and ELK! Enroll in the course right now and begin your journey toward becoming a security expert! 🌟🛡️🚀

A hands-on course!

Build a threat hunting infrastructure in a virtual environment and practice your operational skills.

Based on a virtual scenario, we apply the skills needed for real-world threat hunting.

Review the hunted findings and perform correlation analysis.

We cover how to use the dashboard and the most important methods.

We’ll help you follow along with the lessons smoothly!

  • Virtual images for each chapter’s snapshot (using Naver Drive)

  • For inquiries, feel free to contact me via DM on Inflearn or in the DISCORD '인프런_강의_위협헌팅' channel.



The upcoming
threat hunting series

You will learn, step by step, how to enhance threat-hunting systems in large-scale infrastructure environments using tools such as Ansible, as well as threat-hunting methods that reflect recent issues, including detailed RuleSets and new malware.

Recommended for
these people

Who is this course right for?

  • Those who have a basic knowledge of building secure environments and want to take on the challenge of building an advanced threat hunting system: This course provides systematic, hands-on learning, starting with basic security knowledge and progressing to advanced threat hunting systems.

  • IT and security administrators who want to strengthen their security infrastructure in an enterprise environment: This is ideal for those who want to take their enterprise security to the next level by learning how to detect and respond to threats through real-world attack scenarios.

  • Those interested in security tools such as Sysmon and Suricata can deeply explore how to use these tools, along with effective ways to operate security systems.

  • Job seekers and students aspiring to become security professionals: This course is especially recommended for those who want to develop the security skill set needed in the field. It covers key content that can help enhance your competitiveness in the security industry.

Need to know before starting?

  • Security Fundamentals: Having a basic understanding of common types of attacks, security terminology, and security principles will make it easier to understand the course content.

  • Basic Linux operations knowledge: The course includes content on building and operating systems in a Linux environment, so you should be familiar with basic Linux commands and environment configuration.

  • Log Management and Analysis: Having a basic understanding of log file structures and analysis methods will be a great help in detecting and analyzing threats covered in the course.

  • Basic networking knowledge: A basic understanding of the OSI 7 Layers, TCP/IP, and major protocols and ports is required.

Hello
This is pokkuk

Career Verified

859

Learners

25

Reviews

83

Answers

4.9

Rating

4

Courses

.

Curriculum

All

24 lectures ∙ (6hr 2min)

Course Materials:

Lecture resources
Published: 
Last updated: 

Reviews

All

11 reviews

4.8

11 reviews

  • ad19943435님의 프로필 이미지
    ad19943435

    Reviews 3

    ∙

    Average Rating 4.3

    5

    100% enrolled

    I was planning to build something, so I took this course and it was very helpful.

    • vulcanus6394님의 프로필 이미지
      vulcanus6394

      Reviews 1

      ∙

      Average Rating 5.0

      5

      61% enrolled

      This is informative. It's fun and I've never seen ELK work this well...

      • pokkuk
        Instructor

        Thank you for your valuable course review ^^

    • jjbang0316님의 프로필 이미지
      jjbang0316

      Reviews 9

      ∙

      Average Rating 4.9

      5

      100% enrolled

      • thejysplay8464님의 프로필 이미지
        thejysplay8464

        Reviews 1

        ∙

        Average Rating 5.0

        5

        86% enrolled

        • ykg04261353님의 프로필 이미지
          ykg04261353

          Reviews 4

          ∙

          Average Rating 5.0

          5

          33% enrolled

          pokkuk's other courses

          Check out other courses by the instructor!

          Similar courses

          Explore other courses in the same field!

          Limited time deal

          $57,750.00

          25%

          $59.40