{"batchcomplete":"","continue":{"lecontinue":"20260909060440|27550","continue":"-||"},"query":{"logevents":[{"logid":27560,"ns":0,"title":"Ransomeware Demo","pageid":13127,"logpage":13127,"params":{},"type":"create","action":"create","user":"Thomas.will","timestamp":"2026-09-10T17:34:10Z","comment":"Die Seite wurde neu angelegt: \u201e= Ransomware-Demo =  Diese Demo zeigt den typischen Ablauf einer Ransomware-Infektion in einer isolierten Laborumgebung. Beide Skripte sind ausschlie\u00dflich f\u00fc\u2026\u201c"},{"logid":27559,"ns":6,"title":"Datei:Cybersec-1.1-plan.drawio.png","pageid":11140,"logpage":11140,"params":{"img_sha1":"1tp4nf8pjf2c83k1cy8rn1ktl53nzfu","img_timestamp":"2026-09-09T15:02:52Z"},"type":"upload","action":"overwrite","user":"Thomas.will","timestamp":"2026-09-09T15:02:52Z","comment":""},{"logid":27558,"ns":6,"title":"Datei:Cybersec-1.1-plan.drawio.png","pageid":11140,"logpage":11140,"params":{"img_sha1":"8x1i565vhwbm2pjgp7q7odmdquu49ub","img_timestamp":"2026-09-09T15:01:56Z"},"type":"upload","action":"overwrite","user":"Thomas.will","timestamp":"2026-09-09T15:01:56Z","comment":""},{"logid":27557,"ns":0,"title":"Wazuh Windows 2022","pageid":13126,"logpage":13126,"params":{},"type":"create","action":"create","user":"Thomas.will","timestamp":"2026-09-09T12:22:26Z","comment":"Die Seite wurde neu angelegt: \u201e= Windows Server 2022 Dom\u00e4nencontroller an Wazuh anbinden =  Der Dom\u00e4nencontroller ist die erste Windows-Quelle im SIEM. Er liefert die AD-relevanten Events,\u2026\u201c"},{"logid":27556,"ns":0,"title":"Wazuh Logging Cheat-Sheet","pageid":13125,"logpage":13125,"params":{},"type":"create","action":"create","user":"Thomas.will","timestamp":"2026-09-09T10:10:21Z","comment":"Die Seite wurde neu angelegt: \u201e=Wazuh Logging \u2014 Cheat Sheet= Wo was liegt und womit man nachsieht, wenn im Dashboard nichts ankommt.  Jeder Abschnitt ist einer Maschine zugeordnet: * '''[A\u2026\u201c"},{"logid":27555,"ns":0,"title":"Wazuh-Anbindung der WAF (Coraza) Rocky","pageid":13124,"logpage":13124,"params":{},"type":"create","action":"create","user":"Thomas.will","timestamp":"2026-09-09T09:17:44Z","comment":"Die Seite wurde neu angelegt: \u201e=Wazuh-Anbindung der WAF (Coraza)= Die '''WAF''' (HAProxy + Coraza-SPOA) liefert die Abwehr-Telemetrie an das SIEM: welcher Angriff wurde von welcher Regel geb\u2026\u201c"},{"logid":27554,"ns":0,"title":"Wazuh-Anbindung der WAF (Coraza) Debian","pageid":13123,"logpage":13123,"params":{},"type":"create","action":"create","user":"Thomas.will","timestamp":"2026-09-09T09:16:15Z","comment":"Die Seite wurde neu angelegt: \u201e =Wazuh-Anbindung der WAF (Coraza)= Die '''WAF''' (HAProxy + Coraza-SPOA) liefert die Abwehr-Telemetrie an das SIEM: welcher Angriff wurde von welcher Regel ge\u2026\u201c"},{"logid":27553,"ns":6,"title":"Datei:Wazuh-messpunkte.drawio.png","pageid":13122,"logpage":13122,"params":{"img_sha1":"gq3k7pivnzohs72dd99oiutxzajgkin","img_timestamp":"2026-09-09T06:27:08Z"},"type":"upload","action":"overwrite","user":"Thomas.will","timestamp":"2026-09-09T06:27:08Z","comment":""},{"logid":27552,"ns":6,"title":"Datei:Wazuh-messpunkte.drawio.png","pageid":13122,"logpage":13122,"params":{"img_sha1":"tao75xxp9o92seo1qrmdkue781cpdzz","img_timestamp":"2026-09-09T06:05:18Z"},"type":"upload","action":"overwrite","user":"Thomas.will","timestamp":"2026-09-09T06:05:18Z","comment":""},{"logid":27551,"ns":6,"title":"Datei:Wazuh-messpunkte.drawio.png","pageid":13122,"logpage":13122,"params":{"img_sha1":"a69uxlyw93oc1cljprnjk65079i9qcp","img_timestamp":"2026-09-09T06:04:56Z"},"type":"upload","action":"overwrite","user":"Thomas.will","timestamp":"2026-09-09T06:04:56Z","comment":""}]}}