#homelab

A follow-up to my Wazuh threat intelligence pipeline: replacing the local OpenCTI producer script with a Django/Celery service, Wazuh CDB exports, and retro-hunting against historical alerts.

A complete, reproducible Wazuh homelab setup that automates TI feed ingestion, normalizes & deduplicates indicators, updates Wazuh CDB lists, correlates with Sysmon/Suricata telemetry, and sends alerts to Discord.