Napat Cholkuljana

Optimizing Threat Detection in a Wazuh SIEM Environment through Custom Rule Development and Tuning

Security Information and Event Management (SIEM) platforms are central to modern Security Operations Centers, yet default rule sets often fail to capture the low-level behaviors of emerging Common Vulnerabilities and Exposures (CVEs). This paper presents WAGARD (Wazuh Generative AI Rule Detection), a framework that int...