learn-cyber

Cybersecurity & Wazuh for a Hotel MSSP

Your course home. Ten short lessons that take you from "what is a SIEM?" to onboarding a real hotel as a monitoring client.

Part I — Fundamentals

1. From event to alert The SIEM pipeline — the one mental model the whole business runs on.
2. Wazuh's four parts Agent · server · indexer · dashboard — and how data flows through them.

Part II — Hands on

3. Stand up your Wazuh server A working single-node deployment you can log into.
4. First agent & first detection Deploy an agent and watch Wazuh catch a real attack.
5. How detection really works Decoders, rules, levels, and writing custom detections with wazuh-logtest.

Part III — Running many hotels

6. One group per hotel Agent groups & centralized config — clean separation that scales.
7. Walls between clients RBAC & dashboard tenants — each hotel sees only its own data.

Part IV — The hospitality domain

8. The hotel attack surface PMS, POS, guest Wi-Fi — the crown jewels and how they're hit.
9. PCI-DSS for hotels What card-taking hotels owe, and exactly where Wazuh helps.

Part V — Delivering the service

10. Onboard your first hotel The full end-to-end runbook — everything tied together.

Part VI — Operating your live setup

11. Switch on Wazuh's capabilities Terminal guide: enable FIM, SCA, vuln detection & active response on a running deployment.

Part VII — Into production

12. The whole system, in production Every component mapped to a hotel-security job, the full data flow, and the go-live checklist.