Wazuh on plumy devlog https://plumy.me/tags/wazuh/ Recent content in Wazuh on plumy devlog Hugo en-US Tue, 02 Jun 2026 00:00:00 +0300 Homelab Part 11: Final pfSense Firewall Rules and Segmentation Hardening https://plumy.me/homelab/part-11/ Tue, 02 Jun 2026 00:00:00 +0300 https://plumy.me/homelab/part-11/ I replace build-phase allow-any rules with explicit pfSense firewall policy for malware isolation, Windows clients, containers, honeypots, pentest access, and management paths. Homelab Part 7: Snort IDS and T-Pot Honeypot Telemetry https://plumy.me/homelab/part-7/ Thu, 28 May 2026 12:00:00 +0300 https://plumy.me/homelab/part-7/ I add Snort IDS on pfSense, deploy T-Pot in the honeypot VLAN, forward honeypot logs into Wazuh, and fix decoder and query problems. Homelab Part 6: Wazuh SIEM Foundation https://plumy.me/homelab/part-6/ Thu, 28 May 2026 00:00:00 +0000 https://plumy.me/homelab/part-6/ I stand up Wazuh in the SIEM VLAN, add the Docker host agent, enable Docker telemetry, and forward pfSense logs over syslog.