Wazuh SIEM lab project: phishing email detection using Postfix logs, custom alert rules, and MITRE ATT&CK mapping (T1566.002).
-
Updated
Jan 17, 2026
Wazuh SIEM lab project: phishing email detection using Postfix logs, custom alert rules, and MITRE ATT&CK mapping (T1566.002).
A hands-on Wireshark investigation analyzing live network traffic, DNS requests, TCP connections, packet headers, and TCP streams.
Add a description, image, and links to the security-op topic page so that developers can more easily learn about it.
To associate your repository with the security-op topic, visit your repo's landing page and select "manage topics."