docs: add role-based thumbnail grids for videos (#702)
* docs: add thumbnail grids + per-video anchors on videos page * docs: make thumbnail images open YouTube in new tab --------- Co-authored-by: Clawdbot <clawdbot@Clawdbots-Mac-mini.local>
taylorcopilot committed
Feb 14, 2026 at 11:33 UTC
4d629960e1155e6310f70806369b68d2069dc0aa
2 files changed
+704
docs/stylesheets/extra.css
+39
@@ -46,3 +46,42 @@
46
grid-column: span 6;
47
}
48
}
49
+
50
+/* Video thumbnail grids */
51
+.sf-thumb-grid {
52
+ display: grid;
53
+ grid-template-columns: repeat(12, 1fr);
54
+ gap: 1rem;
55
+ margin: 0.75rem 0 1.5rem;
56
+}
57
+
58
+.sf-thumb-card {
59
+ grid-column: span 12;
60
+ border: 1px solid rgba(255, 255, 255, 0.08);
61
+ background: rgba(255, 255, 255, 0.02);
62
+ border-radius: 14px;
63
+ padding: 0.75rem;
64
+}
65
+
66
+.sf-thumb-card img {
67
+ width: 100%;
68
+ border-radius: 10px;
69
+ display: block;
70
+ margin-bottom: 0.5rem;
71
+}
72
+
73
+.sf-thumb-card a {
74
+ text-decoration: none;
75
+}
76
+
77
+.sf-thumb-meta {
78
+ margin-top: 0.35rem;
79
+ font-size: 0.85rem;
80
+ opacity: 0.8;
81
+}
82
+
83
+@media (min-width: 900px) {
84
+ .sf-thumb-card {
85
+ grid-column: span 4;
86
+ }
87
+}
docs/user/videos.md
+665
@@ -9,6 +9,599 @@ This page is generated from the CoPilot YouTube playlist transcripts and is mean
9
10
---
11
12
+## Browse by thumbnail
13
+
14
+Use these thumbnail grids to jump straight to a video. Click the **thumbnail** to open YouTube in a new tab; click the **title** to jump to the summary on this page.
15
+
16
+### Operator thumbnails (SOC operators / analysts)
17
+
18
+<div class="sf-thumb-grid" markdown>
19
+
20
+<div class="sf-thumb-card" markdown>
21
+<a href="https://www.youtube.com/watch?v=euFrHP0VkD8" target="_blank" rel="noopener">
22
+ <img src="https://img.youtube.com/vi/euFrHP0VkD8/hqdefault.jpg" alt="Wazuh Content Pack For Graylog - Easily Configure Your SOCFortress SIEM Stack">
23
+</a>
24
+[Wazuh Content Pack For Graylog - Easily Configure Your SOCFortress SIEM Stack](#vid-euFrHP0VkD8)
25
+<div class="sf-thumb-meta">Best for: Both</div>
26
+</div>
27
+
28
+<div class="sf-thumb-card" markdown>
29
+<a href="https://www.youtube.com/watch?v=ffAnV31Ne54" target="_blank" rel="noopener">
30
+ <img src="https://img.youtube.com/vi/ffAnV31Ne54/hqdefault.jpg" alt="Wazuh Security Configuration Assessment and CoPilot - Are Your Endpoints Compliant?">
31
+</a>
32
+[Wazuh Security Configuration Assessment and CoPilot - Are Your Endpoints Compliant?](#vid-ffAnV31Ne54)
33
+<div class="sf-thumb-meta">Best for: Both</div>
34
+</div>
35
+
36
+<div class="sf-thumb-card" markdown>
37
+<a href="https://www.youtube.com/watch?v=3p6qiH9UF8U" target="_blank" rel="noopener">
38
+ <img src="https://img.youtube.com/vi/3p6qiH9UF8U/hqdefault.jpg" alt="Powerful Wazuh Alert Management With CoPilot!">
39
+</a>
40
+[Powerful Wazuh Alert Management With CoPilot!](#vid-3p6qiH9UF8U)
41
+<div class="sf-thumb-meta">Best for: Operator</div>
42
+</div>
43
+
44
+<div class="sf-thumb-card" markdown>
45
+<a href="https://www.youtube.com/watch?v=GwPyKM2X1EM" target="_blank" rel="noopener">
46
+ <img src="https://img.youtube.com/vi/GwPyKM2X1EM/hqdefault.jpg" alt="Introducing the Datastore in CoPilot: Upload Artifacts into Cases with Ease">
47
+</a>
48
+[Introducing the Datastore in CoPilot: Upload Artifacts into Cases with Ease](#vid-GwPyKM2X1EM)
49
+<div class="sf-thumb-meta">Best for: Operator</div>
50
+</div>
51
+
52
+<div class="sf-thumb-card" markdown>
53
+<a href="https://www.youtube.com/watch?v=S2ELWusHcxA" target="_blank" rel="noopener">
54
+ <img src="https://img.youtube.com/vi/S2ELWusHcxA/hqdefault.jpg" alt="Supercharge Open-Source Cybersecurity: Velociraptor + Sigma for Your SIEM">
55
+</a>
56
+[Supercharge Open-Source Cybersecurity: Velociraptor + Sigma for Your SIEM](#vid-S2ELWusHcxA)
57
+<div class="sf-thumb-meta">Best for: Both</div>
58
+</div>
59
+
60
+<div class="sf-thumb-card" markdown>
61
+<a href="https://www.youtube.com/watch?v=l9OLtgemYOQ" target="_blank" rel="noopener">
62
+ <img src="https://img.youtube.com/vi/l9OLtgemYOQ/hqdefault.jpg" alt="Open Source SIEM Response | Dynamic Endpoint Actions with SOCFortress CoPilot">
63
+</a>
64
+[Open Source SIEM Response | Dynamic Endpoint Actions with SOCFortress CoPilot](#vid-l9OLtgemYOQ)
65
+<div class="sf-thumb-meta">Best for: Both</div>
66
+</div>
67
+
68
+<div class="sf-thumb-card" markdown>
69
+<a href="https://www.youtube.com/watch?v=R_pG1Gx_7O8" target="_blank" rel="noopener">
70
+ <img src="https://img.youtube.com/vi/R_pG1Gx_7O8/hqdefault.jpg" alt="Endpoint Investigation Made Easier: New Velociraptor Features in SOCFORTRESS CoPilot">
71
+</a>
72
+[Endpoint Investigation Made Easier: New Velociraptor Features in SOCFORTRESS CoPilot](#vid-R_pG1Gx_7O8)
73
+<div class="sf-thumb-meta">Best for: Operator</div>
74
+</div>
75
+
76
+<div class="sf-thumb-card" markdown>
77
+<a href="https://www.youtube.com/watch?v=-2srPC-Dw-0" target="_blank" rel="noopener">
78
+ <img src="https://img.youtube.com/vi/-2srPC-Dw-0/hqdefault.jpg" alt="AI Analyst for Wazuh Alerts: Revolutionize Your SOC with SOCFortress Copilot!">
79
+</a>
80
+[AI Analyst for Wazuh Alerts: Revolutionize Your SOC with SOCFortress Copilot!](#vid--2srPC-Dw-0)
81
+<div class="sf-thumb-meta">Best for: Both</div>
82
+</div>
83
+
84
+<div class="sf-thumb-card" markdown>
85
+<a href="https://www.youtube.com/watch?v=FHjD9QBaLD4" target="_blank" rel="noopener">
86
+ <img src="https://img.youtube.com/vi/FHjD9QBaLD4/hqdefault.jpg" alt="AI Agent for Open Source SIEM: Wazuh, Velociraptor + CoPilot!">
87
+</a>
88
+[AI Agent for Open Source SIEM: Wazuh, Velociraptor + CoPilot!](#vid-FHjD9QBaLD4)
89
+<div class="sf-thumb-meta">Best for: Both</div>
90
+</div>
91
+
92
+<div class="sf-thumb-card" markdown>
93
+<a href="https://www.youtube.com/watch?v=QaLrmSgEcLI" target="_blank" rel="noopener">
94
+ <img src="https://img.youtube.com/vi/QaLrmSgEcLI/hqdefault.jpg" alt="AI Chatbot Now With Threat Intel, Cyber News, Knowledge Base & Attack Surface!">
95
+</a>
96
+[AI Chatbot Now With Threat Intel, Cyber News, Knowledge Base & Attack Surface!](#vid-QaLrmSgEcLI)
97
+<div class="sf-thumb-meta">Best for: Both</div>
98
+</div>
99
+
100
+<div class="sf-thumb-card" markdown>
101
+<a href="https://www.youtube.com/watch?v=tguRiVgytso" target="_blank" rel="noopener">
102
+ <img src="https://img.youtube.com/vi/tguRiVgytso/hqdefault.jpg" alt="Automate Your SOC: Triggering Alerts with Wazuh Rules via Copilot">
103
+</a>
104
+[Automate Your SOC: Triggering Alerts with Wazuh Rules via Copilot](#vid-tguRiVgytso)
105
+<div class="sf-thumb-meta">Best for: Both</div>
106
+</div>
107
+
108
+<div class="sf-thumb-card" markdown>
109
+<a href="https://www.youtube.com/watch?v=AH1g3p8s2_o" target="_blank" rel="noopener">
110
+ <img src="https://img.youtube.com/vi/AH1g3p8s2_o/hqdefault.jpg" alt="Wazuh Rule Writing With CoPilot AI Module - Handle Your Alert Flooding">
111
+</a>
112
+[Wazuh Rule Writing With CoPilot AI Module - Handle Your Alert Flooding](#vid-AH1g3p8s2_o)
113
+<div class="sf-thumb-meta">Best for: Both</div>
114
+</div>
115
+
116
+<div class="sf-thumb-card" markdown>
117
+<a href="https://www.youtube.com/watch?v=llm3uSSUhqs" target="_blank" rel="noopener">
118
+ <img src="https://img.youtube.com/vi/llm3uSSUhqs/hqdefault.jpg" alt="Mastering Wazuh's Active Response: Block Malicious IPs with CoPilot & Wazuh!">
119
+</a>
120
+[Mastering Wazuh's Active Response: Block Malicious IPs with CoPilot & Wazuh!](#vid-llm3uSSUhqs)
121
+<div class="sf-thumb-meta">Best for: Both</div>
122
+</div>
123
+
124
+<div class="sf-thumb-card" markdown>
125
+<a href="https://www.youtube.com/watch?v=Ko5jLfkSCrk" target="_blank" rel="noopener">
126
+ <img src="https://img.youtube.com/vi/Ko5jLfkSCrk/hqdefault.jpg" alt="Revolutionize Your SIEM Alerts: Integrate CoPilot & Shuffle">
127
+</a>
128
+[Revolutionize Your SIEM Alerts: Integrate CoPilot & Shuffle](#vid-Ko5jLfkSCrk)
129
+<div class="sf-thumb-meta">Best for: Both</div>
130
+</div>
131
+
132
+<div class="sf-thumb-card" markdown>
133
+<a href="https://www.youtube.com/watch?v=GWTNA-6Z_Tk" target="_blank" rel="noopener">
134
+ <img src="https://img.youtube.com/vi/GWTNA-6Z_Tk/hqdefault.jpg" alt="Tame the Noise: Sigma Exclusions in CoPilot for Velociraptor Alerts">
135
+</a>
136
+[Tame the Noise: Sigma Exclusions in CoPilot for Velociraptor Alerts](#vid-GWTNA-6Z_Tk)
137
+<div class="sf-thumb-meta">Best for: Both</div>
138
+</div>
139
+
140
+<div class="sf-thumb-card" markdown>
141
+<a href="https://www.youtube.com/watch?v=XT1d49HTqQw" target="_blank" rel="noopener">
142
+ <img src="https://img.youtube.com/vi/XT1d49HTqQw/hqdefault.jpg" alt="🚀 Master Sysmon Config Management with CoPilot & Wazuh!">
143
+</a>
144
+[🚀 Master Sysmon Config Management with CoPilot & Wazuh!](#vid-XT1d49HTqQw)
145
+<div class="sf-thumb-meta">Best for: Both</div>
146
+</div>
147
+
148
+<div class="sf-thumb-card" markdown>
149
+<a href="https://www.youtube.com/watch?v=Ogr70DWAeTc" target="_blank" rel="noopener">
150
+ <img src="https://img.youtube.com/vi/Ogr70DWAeTc/hqdefault.jpg" alt="Supercharge Wazuh Active Response with CoPilot: No More Limits!">
151
+</a>
152
+[Supercharge Wazuh Active Response with CoPilot: No More Limits!](#vid-Ogr70DWAeTc)
153
+<div class="sf-thumb-meta">Best for: Both</div>
154
+</div>
155
+
156
+<div class="sf-thumb-card" markdown>
157
+<a href="https://www.youtube.com/watch?v=TMJOBATTK9M" target="_blank" rel="noopener">
158
+ <img src="https://img.youtube.com/vi/TMJOBATTK9M/hqdefault.jpg" alt="Test Your Wazuh Detection Rules: One-Click Atomic Red Team + Velociraptor + CoPilot">
159
+</a>
160
+[Test Your Wazuh Detection Rules: One-Click Atomic Red Team + Velociraptor + CoPilot](#vid-TMJOBATTK9M)
161
+<div class="sf-thumb-meta">Best for: Both</div>
162
+</div>
163
+
164
+<div class="sf-thumb-card" markdown>
165
+<a href="https://www.youtube.com/watch?v=tL3oNEx_3M8" target="_blank" rel="noopener">
166
+ <img src="https://img.youtube.com/vi/tL3oNEx_3M8/hqdefault.jpg" alt="Simulate Linux Attacks and Tune Detection Rules with Atomic Red Team">
167
+</a>
168
+[Simulate Linux Attacks and Tune Detection Rules with Atomic Red Team](#vid-tL3oNEx_3M8)
169
+<div class="sf-thumb-meta">Best for: Both</div>
170
+</div>
171
+
172
+<div class="sf-thumb-card" markdown>
173
+<a href="https://www.youtube.com/watch?v=FJunzP2c_mQ" target="_blank" rel="noopener">
174
+ <img src="https://img.youtube.com/vi/FJunzP2c_mQ/hqdefault.jpg" alt="Auto-Enrich Wazuh Events with Threat Intel Feeds!">
175
+</a>
176
+[Auto-Enrich Wazuh Events with Threat Intel Feeds!](#vid-FJunzP2c_mQ)
177
+<div class="sf-thumb-meta">Best for: Both</div>
178
+</div>
179
+
180
+<div class="sf-thumb-card" markdown>
181
+<a href="https://www.youtube.com/watch?v=CVVj9HRtjOE" target="_blank" rel="noopener">
182
+ <img src="https://img.youtube.com/vi/CVVj9HRtjOE/hqdefault.jpg" alt="Analyzing Processes in Wazuh Alerts with Advanced Risk Scoring from Global Data">
183
+</a>
184
+[Analyzing Processes in Wazuh Alerts with Advanced Risk Scoring from Global Data](#vid-CVVj9HRtjOE)
185
+<div class="sf-thumb-meta">Best for: Both</div>
186
+</div>
187
+
188
+<div class="sf-thumb-card" markdown>
189
+<a href="https://www.youtube.com/watch?v=G3MDJSMvnRo" target="_blank" rel="noopener">
190
+ <img src="https://img.youtube.com/vi/G3MDJSMvnRo/hqdefault.jpg" alt="Simplify Cloud Security: ScoutSuite and Copilot Tutorial">
191
+</a>
192
+[Simplify Cloud Security: ScoutSuite and Copilot Tutorial](#vid-G3MDJSMvnRo)
193
+<div class="sf-thumb-meta">Best for: Both</div>
194
+</div>
195
+
196
+<div class="sf-thumb-card" markdown>
197
+<a href="https://www.youtube.com/watch?v=Qnm9SXVJGWw" target="_blank" rel="noopener">
198
+ <img src="https://img.youtube.com/vi/Qnm9SXVJGWw/hqdefault.jpg" alt="Integrate EPSS with Wazuh for Top-Notch Vulnerability Management!">
199
+</a>
200
+[Integrate EPSS with Wazuh for Top-Notch Vulnerability Management!](#vid-Qnm9SXVJGWw)
201
+<div class="sf-thumb-meta">Best for: Both</div>
202
+</div>
203
+
204
+<div class="sf-thumb-card" markdown>
205
+<a href="https://www.youtube.com/watch?v=-SVHKuQUxlI" target="_blank" rel="noopener">
206
+ <img src="https://img.youtube.com/vi/-SVHKuQUxlI/hqdefault.jpg" alt="Enhancing Web App Security: Integrating Copilot with Nuclei for Vulnerability Scanning">
207
+</a>
208
+[Enhancing Web App Security: Integrating Copilot with Nuclei for Vulnerability Scanning](#vid--SVHKuQUxlI)
209
+<div class="sf-thumb-meta">Best for: Both</div>
210
+</div>
211
+
212
+<div class="sf-thumb-card" markdown>
213
+<a href="https://www.youtube.com/watch?v=fNybop2FTRE" target="_blank" rel="noopener">
214
+ <img src="https://img.youtube.com/vi/fNybop2FTRE/hqdefault.jpg" alt="Boost CoPilot: IoCs from Wazuh + VirusTotal Enrichment">
215
+</a>
216
+[Boost CoPilot: IoCs from Wazuh + VirusTotal Enrichment](#vid-fNybop2FTRE)
217
+<div class="sf-thumb-meta">Best for: Both</div>
218
+</div>
219
+
220
+<div class="sf-thumb-card" markdown>
221
+<a href="https://www.youtube.com/watch?v=ixxVe_9LAfQ" target="_blank" rel="noopener">
222
+ <img src="https://img.youtube.com/vi/ixxVe_9LAfQ/hqdefault.jpg" alt="CoPilot + VirusTotal: Instantly Scan Files for Malware!">
223
+</a>
224
+[CoPilot + VirusTotal: Instantly Scan Files for Malware!](#vid-ixxVe_9LAfQ)
225
+<div class="sf-thumb-meta">Best for: Both</div>
226
+</div>
227
+
228
+<div class="sf-thumb-card" markdown>
229
+<a href="https://www.youtube.com/watch?v=NUrnlTvLzVk" target="_blank" rel="noopener">
230
+ <img src="https://img.youtube.com/vi/NUrnlTvLzVk/hqdefault.jpg" alt="CoPilot Supercharges Wazuh with SCA & Vulnerability Overviews">
231
+</a>
232
+[CoPilot Supercharges Wazuh with SCA & Vulnerability Overviews](#vid-NUrnlTvLzVk)
233
+<div class="sf-thumb-meta">Best for: Both</div>
234
+</div>
235
+
236
+</div>
237
+
238
+### Admin/Engineer thumbnails (admins / engineers)
239
+
240
+<div class="sf-thumb-grid" markdown>
241
+
242
+<div class="sf-thumb-card" markdown>
243
+<a href="https://www.youtube.com/watch?v=qQbex2zAhWI" target="_blank" rel="noopener">
244
+ <img src="https://img.youtube.com/vi/qQbex2zAhWI/hqdefault.jpg" alt="Copilot - Your Open Source Security Integrator">
245
+</a>
246
+[Copilot - Your Open Source Security Integrator](#vid-qQbex2zAhWI)
247
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
248
+</div>
249
+
250
+<div class="sf-thumb-card" markdown>
251
+<a href="https://www.youtube.com/watch?v=CQolYA30Gls" target="_blank" rel="noopener">
252
+ <img src="https://img.youtube.com/vi/CQolYA30Gls/hqdefault.jpg" alt="Copilot - Your Next Open Source Security Tool">
253
+</a>
254
+[Copilot - Your Next Open Source Security Tool](#vid-CQolYA30Gls)
255
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
256
+</div>
257
+
258
+<div class="sf-thumb-card" markdown>
259
+<a href="https://www.youtube.com/watch?v=seITDGXAiJw" target="_blank" rel="noopener">
260
+ <img src="https://img.youtube.com/vi/seITDGXAiJw/hqdefault.jpg" alt="CoPilot Install">
261
+</a>
262
+[CoPilot Install](#vid-seITDGXAiJw)
263
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
264
+</div>
265
+
266
+<div class="sf-thumb-card" markdown>
267
+<a href="https://www.youtube.com/watch?v=7dUHSMWWTuY" target="_blank" rel="noopener">
268
+ <img src="https://img.youtube.com/vi/7dUHSMWWTuY/hqdefault.jpg" alt="CoPilot Install -- Final Update (I Hope)">
269
+</a>
270
+[CoPilot Install -- Final Update (I Hope)](#vid-7dUHSMWWTuY)
271
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
272
+</div>
273
+
274
+<div class="sf-thumb-card" markdown>
275
+<a href="https://www.youtube.com/watch?v=euFrHP0VkD8" target="_blank" rel="noopener">
276
+ <img src="https://img.youtube.com/vi/euFrHP0VkD8/hqdefault.jpg" alt="Wazuh Content Pack For Graylog - Easily Configure Your SOCFortress SIEM Stack">
277
+</a>
278
+[Wazuh Content Pack For Graylog - Easily Configure Your SOCFortress SIEM Stack](#vid-euFrHP0VkD8)
279
+<div class="sf-thumb-meta">Best for: Both</div>
280
+</div>
281
+
282
+<div class="sf-thumb-card" markdown>
283
+<a href="https://www.youtube.com/watch?v=ffAnV31Ne54" target="_blank" rel="noopener">
284
+ <img src="https://img.youtube.com/vi/ffAnV31Ne54/hqdefault.jpg" alt="Wazuh Security Configuration Assessment and CoPilot - Are Your Endpoints Compliant?">
285
+</a>
286
+[Wazuh Security Configuration Assessment and CoPilot - Are Your Endpoints Compliant?](#vid-ffAnV31Ne54)
287
+<div class="sf-thumb-meta">Best for: Both</div>
288
+</div>
289
+
290
+<div class="sf-thumb-card" markdown>
291
+<a href="https://www.youtube.com/watch?v=S2ELWusHcxA" target="_blank" rel="noopener">
292
+ <img src="https://img.youtube.com/vi/S2ELWusHcxA/hqdefault.jpg" alt="Supercharge Open-Source Cybersecurity: Velociraptor + Sigma for Your SIEM">
293
+</a>
294
+[Supercharge Open-Source Cybersecurity: Velociraptor + Sigma for Your SIEM](#vid-S2ELWusHcxA)
295
+<div class="sf-thumb-meta">Best for: Both</div>
296
+</div>
297
+
298
+<div class="sf-thumb-card" markdown>
299
+<a href="https://www.youtube.com/watch?v=31lCr80-NVM" target="_blank" rel="noopener">
300
+ <img src="https://img.youtube.com/vi/31lCr80-NVM/hqdefault.jpg" alt="Manage Wazuh Detection Rules with CoPilot">
301
+</a>
302
+[Manage Wazuh Detection Rules with CoPilot](#vid-31lCr80-NVM)
303
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
304
+</div>
305
+
306
+<div class="sf-thumb-card" markdown>
307
+<a href="https://www.youtube.com/watch?v=l9OLtgemYOQ" target="_blank" rel="noopener">
308
+ <img src="https://img.youtube.com/vi/l9OLtgemYOQ/hqdefault.jpg" alt="Open Source SIEM Response | Dynamic Endpoint Actions with SOCFortress CoPilot">
309
+</a>
310
+[Open Source SIEM Response | Dynamic Endpoint Actions with SOCFortress CoPilot](#vid-l9OLtgemYOQ)
311
+<div class="sf-thumb-meta">Best for: Both</div>
312
+</div>
313
+
314
+<div class="sf-thumb-card" markdown>
315
+<a href="https://www.youtube.com/watch?v=-2srPC-Dw-0" target="_blank" rel="noopener">
316
+ <img src="https://img.youtube.com/vi/-2srPC-Dw-0/hqdefault.jpg" alt="AI Analyst for Wazuh Alerts: Revolutionize Your SOC with SOCFortress Copilot!">
317
+</a>
318
+[AI Analyst for Wazuh Alerts: Revolutionize Your SOC with SOCFortress Copilot!](#vid--2srPC-Dw-0)
319
+<div class="sf-thumb-meta">Best for: Both</div>
320
+</div>
321
+
322
+<div class="sf-thumb-card" markdown>
323
+<a href="https://www.youtube.com/watch?v=FHjD9QBaLD4" target="_blank" rel="noopener">
324
+ <img src="https://img.youtube.com/vi/FHjD9QBaLD4/hqdefault.jpg" alt="AI Agent for Open Source SIEM: Wazuh, Velociraptor + CoPilot!">
325
+</a>
326
+[AI Agent for Open Source SIEM: Wazuh, Velociraptor + CoPilot!](#vid-FHjD9QBaLD4)
327
+<div class="sf-thumb-meta">Best for: Both</div>
328
+</div>
329
+
330
+<div class="sf-thumb-card" markdown>
331
+<a href="https://www.youtube.com/watch?v=QaLrmSgEcLI" target="_blank" rel="noopener">
332
+ <img src="https://img.youtube.com/vi/QaLrmSgEcLI/hqdefault.jpg" alt="AI Chatbot Now With Threat Intel, Cyber News, Knowledge Base & Attack Surface!">
333
+</a>
334
+[AI Chatbot Now With Threat Intel, Cyber News, Knowledge Base & Attack Surface!](#vid-QaLrmSgEcLI)
335
+<div class="sf-thumb-meta">Best for: Both</div>
336
+</div>
337
+
338
+<div class="sf-thumb-card" markdown>
339
+<a href="https://www.youtube.com/watch?v=tguRiVgytso" target="_blank" rel="noopener">
340
+ <img src="https://img.youtube.com/vi/tguRiVgytso/hqdefault.jpg" alt="Automate Your SOC: Triggering Alerts with Wazuh Rules via Copilot">
341
+</a>
342
+[Automate Your SOC: Triggering Alerts with Wazuh Rules via Copilot](#vid-tguRiVgytso)
343
+<div class="sf-thumb-meta">Best for: Both</div>
344
+</div>
345
+
346
+<div class="sf-thumb-card" markdown>
347
+<a href="https://www.youtube.com/watch?v=AH1g3p8s2_o" target="_blank" rel="noopener">
348
+ <img src="https://img.youtube.com/vi/AH1g3p8s2_o/hqdefault.jpg" alt="Wazuh Rule Writing With CoPilot AI Module - Handle Your Alert Flooding">
349
+</a>
350
+[Wazuh Rule Writing With CoPilot AI Module - Handle Your Alert Flooding](#vid-AH1g3p8s2_o)
351
+<div class="sf-thumb-meta">Best for: Both</div>
352
+</div>
353
+
354
+<div class="sf-thumb-card" markdown>
355
+<a href="https://www.youtube.com/watch?v=llm3uSSUhqs" target="_blank" rel="noopener">
356
+ <img src="https://img.youtube.com/vi/llm3uSSUhqs/hqdefault.jpg" alt="Mastering Wazuh's Active Response: Block Malicious IPs with CoPilot & Wazuh!">
357
+</a>
358
+[Mastering Wazuh's Active Response: Block Malicious IPs with CoPilot & Wazuh!](#vid-llm3uSSUhqs)
359
+<div class="sf-thumb-meta">Best for: Both</div>
360
+</div>
361
+
362
+<div class="sf-thumb-card" markdown>
363
+<a href="https://www.youtube.com/watch?v=Ko5jLfkSCrk" target="_blank" rel="noopener">
364
+ <img src="https://img.youtube.com/vi/Ko5jLfkSCrk/hqdefault.jpg" alt="Revolutionize Your SIEM Alerts: Integrate CoPilot & Shuffle">
365
+</a>
366
+[Revolutionize Your SIEM Alerts: Integrate CoPilot & Shuffle](#vid-Ko5jLfkSCrk)
367
+<div class="sf-thumb-meta">Best for: Both</div>
368
+</div>
369
+
370
+<div class="sf-thumb-card" markdown>
371
+<a href="https://www.youtube.com/watch?v=GWTNA-6Z_Tk" target="_blank" rel="noopener">
372
+ <img src="https://img.youtube.com/vi/GWTNA-6Z_Tk/hqdefault.jpg" alt="Tame the Noise: Sigma Exclusions in CoPilot for Velociraptor Alerts">
373
+</a>
374
+[Tame the Noise: Sigma Exclusions in CoPilot for Velociraptor Alerts](#vid-GWTNA-6Z_Tk)
375
+<div class="sf-thumb-meta">Best for: Both</div>
376
+</div>
377
+
378
+<div class="sf-thumb-card" markdown>
379
+<a href="https://www.youtube.com/watch?v=XT1d49HTqQw" target="_blank" rel="noopener">
380
+ <img src="https://img.youtube.com/vi/XT1d49HTqQw/hqdefault.jpg" alt="🚀 Master Sysmon Config Management with CoPilot & Wazuh!">
381
+</a>
382
+[🚀 Master Sysmon Config Management with CoPilot & Wazuh!](#vid-XT1d49HTqQw)
383
+<div class="sf-thumb-meta">Best for: Both</div>
384
+</div>
385
+
386
+<div class="sf-thumb-card" markdown>
387
+<a href="https://www.youtube.com/watch?v=Ogr70DWAeTc" target="_blank" rel="noopener">
388
+ <img src="https://img.youtube.com/vi/Ogr70DWAeTc/hqdefault.jpg" alt="Supercharge Wazuh Active Response with CoPilot: No More Limits!">
389
+</a>
390
+[Supercharge Wazuh Active Response with CoPilot: No More Limits!](#vid-Ogr70DWAeTc)
391
+<div class="sf-thumb-meta">Best for: Both</div>
392
+</div>
393
+
394
+<div class="sf-thumb-card" markdown>
395
+<a href="https://www.youtube.com/watch?v=TMJOBATTK9M" target="_blank" rel="noopener">
396
+ <img src="https://img.youtube.com/vi/TMJOBATTK9M/hqdefault.jpg" alt="Test Your Wazuh Detection Rules: One-Click Atomic Red Team + Velociraptor + CoPilot">
397
+</a>
398
+[Test Your Wazuh Detection Rules: One-Click Atomic Red Team + Velociraptor + CoPilot](#vid-TMJOBATTK9M)
399
+<div class="sf-thumb-meta">Best for: Both</div>
400
+</div>
401
+
402
+<div class="sf-thumb-card" markdown>
403
+<a href="https://www.youtube.com/watch?v=tL3oNEx_3M8" target="_blank" rel="noopener">
404
+ <img src="https://img.youtube.com/vi/tL3oNEx_3M8/hqdefault.jpg" alt="Simulate Linux Attacks and Tune Detection Rules with Atomic Red Team">
405
+</a>
406
+[Simulate Linux Attacks and Tune Detection Rules with Atomic Red Team](#vid-tL3oNEx_3M8)
407
+<div class="sf-thumb-meta">Best for: Both</div>
408
+</div>
409
+
410
+<div class="sf-thumb-card" markdown>
411
+<a href="https://www.youtube.com/watch?v=MKqByrkDqZU" target="_blank" rel="noopener">
412
+ <img src="https://img.youtube.com/vi/MKqByrkDqZU/hqdefault.jpg" alt="Wazuh Indexer and CoPilot Integration">
413
+</a>
414
+[Wazuh Indexer and CoPilot Integration](#vid-MKqByrkDqZU)
415
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
416
+</div>
417
+
418
+<div class="sf-thumb-card" markdown>
419
+<a href="https://www.youtube.com/watch?v=MyvPmQ4Cfb0" target="_blank" rel="noopener">
420
+ <img src="https://img.youtube.com/vi/MyvPmQ4Cfb0/hqdefault.jpg" alt="Graylog and CoPilot Integration">
421
+</a>
422
+[Graylog and CoPilot Integration](#vid-MyvPmQ4Cfb0)
423
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
424
+</div>
425
+
426
+<div class="sf-thumb-card" markdown>
427
+<a href="https://www.youtube.com/watch?v=iI6yKgKC5wk" target="_blank" rel="noopener">
428
+ <img src="https://img.youtube.com/vi/iI6yKgKC5wk/hqdefault.jpg" alt="Wazuh Manager and CoPilot Integration">
429
+</a>
430
+[Wazuh Manager and CoPilot Integration](#vid-iI6yKgKC5wk)
431
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
432
+</div>
433
+
434
+<div class="sf-thumb-card" markdown>
435
+<a href="https://www.youtube.com/watch?v=-Cqyczg6ELE" target="_blank" rel="noopener">
436
+ <img src="https://img.youtube.com/vi/-Cqyczg6ELE/hqdefault.jpg" alt="Velociraptor and Copilot Integration">
437
+</a>
438
+[Velociraptor and Copilot Integration](#vid--Cqyczg6ELE)
439
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
440
+</div>
441
+
442
+<div class="sf-thumb-card" markdown>
443
+<a href="https://www.youtube.com/watch?v=vt6M1SzNfjE" target="_blank" rel="noopener">
444
+ <img src="https://img.youtube.com/vi/vt6M1SzNfjE/hqdefault.jpg" alt="CoPilot And InfluxDB - Monitor Your SIEM Stack Servers with InfluxDB and CoPilot!">
445
+</a>
446
+[CoPilot And InfluxDB - Monitor Your SIEM Stack Servers with InfluxDB and CoPilot!](#vid-vt6M1SzNfjE)
447
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
448
+</div>
449
+
450
+<div class="sf-thumb-card" markdown>
451
+<a href="https://www.youtube.com/watch?v=n9koQ1UL-L0" target="_blank" rel="noopener">
452
+ <img src="https://img.youtube.com/vi/n9koQ1UL-L0/hqdefault.jpg" alt="DFIR-IRIS and CoPilot - Bring your SOC Alerts into CoPilot">
453
+</a>
454
+[DFIR-IRIS and CoPilot - Bring your SOC Alerts into CoPilot](#vid-n9koQ1UL-L0)
455
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
456
+</div>
457
+
458
+<div class="sf-thumb-card" markdown>
459
+<a href="https://www.youtube.com/watch?v=FOOU1PQnd7g" target="_blank" rel="noopener">
460
+ <img src="https://img.youtube.com/vi/FOOU1PQnd7g/hqdefault.jpg" alt="Grafana and CoPilot Integration">
461
+</a>
462
+[Grafana and CoPilot Integration](#vid-FOOU1PQnd7g)
463
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
464
+</div>
465
+
466
+<div class="sf-thumb-card" markdown>
467
+<a href="https://www.youtube.com/watch?v=ihj2F2rA6BQ" target="_blank" rel="noopener">
468
+ <img src="https://img.youtube.com/vi/ihj2F2rA6BQ/hqdefault.jpg" alt="Seamless Office365 Integration with Wazuh: Simplified by Copilot">
469
+</a>
470
+[Seamless Office365 Integration with Wazuh: Simplified by Copilot](#vid-ihj2F2rA6BQ)
471
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
472
+</div>
473
+
474
+<div class="sf-thumb-card" markdown>
475
+<a href="https://www.youtube.com/watch?v=YOVUOpZDEzM" target="_blank" rel="noopener">
476
+ <img src="https://img.youtube.com/vi/YOVUOpZDEzM/hqdefault.jpg" alt="Unlock Full SIEM Potential: Effortlessly Ingest Crowdstrike Events Into Your Open Source SIEM!">
477
+</a>
478
+[Unlock Full SIEM Potential: Effortlessly Ingest Crowdstrike Events Into Your Open Source SIEM!](#vid-YOVUOpZDEzM)
479
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
480
+</div>
481
+
482
+<div class="sf-thumb-card" markdown>
483
+<a href="https://www.youtube.com/watch?v=tgWRvOJX5HA" target="_blank" rel="noopener">
484
+ <img src="https://img.youtube.com/vi/tgWRvOJX5HA/hqdefault.jpg" alt="CoPilot Event Shipper Configuration - Ingest 3rd Party Logs into your SIEM Stack">
485
+</a>
486
+[CoPilot Event Shipper Configuration - Ingest 3rd Party Logs into your SIEM Stack](#vid-tgWRvOJX5HA)
487
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
488
+</div>
489
+
490
+<div class="sf-thumb-card" markdown>
491
+<a href="https://www.youtube.com/watch?v=chTthkpMpTY" target="_blank" rel="noopener">
492
+ <img src="https://img.youtube.com/vi/chTthkpMpTY/hqdefault.jpg" alt="Unlock Full SIEM Potential: Effortlessly Ingest DUO MFA Events Into Your Open Source SIEM!">
493
+</a>
494
+[Unlock Full SIEM Potential: Effortlessly Ingest DUO MFA Events Into Your Open Source SIEM!](#vid-chTthkpMpTY)
495
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
496
+</div>
497
+
498
+<div class="sf-thumb-card" markdown>
499
+<a href="https://www.youtube.com/watch?v=wK4aA7QrXmE" target="_blank" rel="noopener">
500
+ <img src="https://img.youtube.com/vi/wK4aA7QrXmE/hqdefault.jpg" alt="New MITRE ATT&CK Integration in CoPilot – Game Changer for SOC Analysts!">
501
+</a>
502
+[New MITRE ATT&CK Integration in CoPilot – Game Changer for SOC Analysts!](#vid-wK4aA7QrXmE)
503
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
504
+</div>
505
+
506
+<div class="sf-thumb-card" markdown>
507
+<a href="https://www.youtube.com/watch?v=O5SaFwAMMtA" target="_blank" rel="noopener">
508
+ <img src="https://img.youtube.com/vi/O5SaFwAMMtA/hqdefault.jpg" alt="Supercharge Your Log Ingestion: Webhooks to SIEM Made Easy">
509
+</a>
510
+[Supercharge Your Log Ingestion: Webhooks to SIEM Made Easy](#vid-O5SaFwAMMtA)
511
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
512
+</div>
513
+
514
+<div class="sf-thumb-card" markdown>
515
+<a href="https://www.youtube.com/watch?v=FJunzP2c_mQ" target="_blank" rel="noopener">
516
+ <img src="https://img.youtube.com/vi/FJunzP2c_mQ/hqdefault.jpg" alt="Auto-Enrich Wazuh Events with Threat Intel Feeds!">
517
+</a>
518
+[Auto-Enrich Wazuh Events with Threat Intel Feeds!](#vid-FJunzP2c_mQ)
519
+<div class="sf-thumb-meta">Best for: Both</div>
520
+</div>
521
+
522
+<div class="sf-thumb-card" markdown>
523
+<a href="https://www.youtube.com/watch?v=CVVj9HRtjOE" target="_blank" rel="noopener">
524
+ <img src="https://img.youtube.com/vi/CVVj9HRtjOE/hqdefault.jpg" alt="Analyzing Processes in Wazuh Alerts with Advanced Risk Scoring from Global Data">
525
+</a>
526
+[Analyzing Processes in Wazuh Alerts with Advanced Risk Scoring from Global Data](#vid-CVVj9HRtjOE)
527
+<div class="sf-thumb-meta">Best for: Both</div>
528
+</div>
529
+
530
+<div class="sf-thumb-card" markdown>
531
+<a href="https://www.youtube.com/watch?v=G3MDJSMvnRo" target="_blank" rel="noopener">
532
+ <img src="https://img.youtube.com/vi/G3MDJSMvnRo/hqdefault.jpg" alt="Simplify Cloud Security: ScoutSuite and Copilot Tutorial">
533
+</a>
534
+[Simplify Cloud Security: ScoutSuite and Copilot Tutorial](#vid-G3MDJSMvnRo)
535
+<div class="sf-thumb-meta">Best for: Both</div>
536
+</div>
537
+
538
+<div class="sf-thumb-card" markdown>
539
+<a href="https://www.youtube.com/watch?v=Qnm9SXVJGWw" target="_blank" rel="noopener">
540
+ <img src="https://img.youtube.com/vi/Qnm9SXVJGWw/hqdefault.jpg" alt="Integrate EPSS with Wazuh for Top-Notch Vulnerability Management!">
541
+</a>
542
+[Integrate EPSS with Wazuh for Top-Notch Vulnerability Management!](#vid-Qnm9SXVJGWw)
543
+<div class="sf-thumb-meta">Best for: Both</div>
544
+</div>
545
+
546
+<div class="sf-thumb-card" markdown>
547
+<a href="https://www.youtube.com/watch?v=-SVHKuQUxlI" target="_blank" rel="noopener">
548
+ <img src="https://img.youtube.com/vi/-SVHKuQUxlI/hqdefault.jpg" alt="Enhancing Web App Security: Integrating Copilot with Nuclei for Vulnerability Scanning">
549
+</a>
550
+[Enhancing Web App Security: Integrating Copilot with Nuclei for Vulnerability Scanning](#vid--SVHKuQUxlI)
551
+<div class="sf-thumb-meta">Best for: Both</div>
552
+</div>
553
+
554
+<div class="sf-thumb-card" markdown>
555
+<a href="https://www.youtube.com/watch?v=fNybop2FTRE" target="_blank" rel="noopener">
556
+ <img src="https://img.youtube.com/vi/fNybop2FTRE/hqdefault.jpg" alt="Boost CoPilot: IoCs from Wazuh + VirusTotal Enrichment">
557
+</a>
558
+[Boost CoPilot: IoCs from Wazuh + VirusTotal Enrichment](#vid-fNybop2FTRE)
559
+<div class="sf-thumb-meta">Best for: Both</div>
560
+</div>
561
+
562
+<div class="sf-thumb-card" markdown>
563
+<a href="https://www.youtube.com/watch?v=ixxVe_9LAfQ" target="_blank" rel="noopener">
564
+ <img src="https://img.youtube.com/vi/ixxVe_9LAfQ/hqdefault.jpg" alt="CoPilot + VirusTotal: Instantly Scan Files for Malware!">
565
+</a>
566
+[CoPilot + VirusTotal: Instantly Scan Files for Malware!](#vid-ixxVe_9LAfQ)
567
+<div class="sf-thumb-meta">Best for: Both</div>
568
+</div>
569
+
570
+<div class="sf-thumb-card" markdown>
571
+<a href="https://www.youtube.com/watch?v=NUrnlTvLzVk" target="_blank" rel="noopener">
572
+ <img src="https://img.youtube.com/vi/NUrnlTvLzVk/hqdefault.jpg" alt="CoPilot Supercharges Wazuh with SCA & Vulnerability Overviews">
573
+</a>
574
+[CoPilot Supercharges Wazuh with SCA & Vulnerability Overviews](#vid-NUrnlTvLzVk)
575
+<div class="sf-thumb-meta">Best for: Both</div>
576
+</div>
577
+
578
+<div class="sf-thumb-card" markdown>
579
+<a href="https://www.youtube.com/watch?v=hC0JHY5WF-U" target="_blank" rel="noopener">
580
+ <img src="https://img.youtube.com/vi/hC0JHY5WF-U/hqdefault.jpg" alt="Wazuh Dashboards in Grafana & Customer Provisioning in CoPilot!">
581
+</a>
582
+[Wazuh Dashboards in Grafana & Customer Provisioning in CoPilot!](#vid-hC0JHY5WF-U)
583
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
584
+</div>
585
+
586
+<div class="sf-thumb-card" markdown>
587
+<a href="https://www.youtube.com/watch?v=9xHr5-Wlypw" target="_blank" rel="noopener">
588
+ <img src="https://img.youtube.com/vi/9xHr5-Wlypw/hqdefault.jpg" alt="Create Custom PDF Reports in Grafana Detailing Security Events | Share with Your Clients!">
589
+</a>
590
+[Create Custom PDF Reports in Grafana Detailing Security Events | Share with Your Clients!](#vid-9xHr5-Wlypw)
591
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
592
+</div>
593
+
594
+<div class="sf-thumb-card" markdown>
595
+<a href="https://www.youtube.com/watch?v=_bvFejcFwFM" target="_blank" rel="noopener">
596
+ <img src="https://img.youtube.com/vi/_bvFejcFwFM/hqdefault.jpg" alt="A Customer Portal for Your Open-Source SIEM Stack">
597
+</a>
598
+[A Customer Portal for Your Open-Source SIEM Stack](#vid-_bvFejcFwFM)
599
+<div class="sf-thumb-meta">Best for: Admin-Engineer</div>
600
+</div>
601
+
602
+</div>
603
+
604
+---
605
## How to use this page
606
607
- Start with the section that matches your role.
@@ -20,6 +613,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
613
614
### Core SOC Workflows: Alerting, Case Management, and Investigations
615
616
+<a id="vid-euFrHP0VkD8"></a>
617
#### Wazuh Content Pack For Graylog - Easily Configure Your SOCFortress SIEM Stack
618
- Link: https://www.youtube.com/watch?v=euFrHP0VkD8
619
- Best for: Both
@@ -34,6 +628,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
628
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
629
- Key CoPilot features shown: Wazuh integration, Graylog connector, Grafana integration, Incident management, Alert triage UI
630
631
+<a id="vid-ffAnV31Ne54"></a>
632
#### Wazuh Security Configuration Assessment and CoPilot - Are Your Endpoints Compliant?
633
- Link: https://www.youtube.com/watch?v=ffAnV31Ne54
634
- Best for: Both
@@ -48,6 +643,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
643
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
644
- Key CoPilot features shown: Wazuh integration, SCA visibility, Incident management, Alert triage UI
645
646
+<a id="vid-3p6qiH9UF8U"></a>
647
#### Powerful Wazuh Alert Management With CoPilot!
648
- Link: https://www.youtube.com/watch?v=3p6qiH9UF8U
649
- Best for: Operator
@@ -62,6 +658,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
658
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
659
- Key CoPilot features shown: Wazuh integration, Built-in case management, Incident management, Alert triage UI
660
661
+<a id="vid-GwPyKM2X1EM"></a>
662
#### Introducing the Datastore in CoPilot: Upload Artifacts into Cases with Ease
663
- Link: https://www.youtube.com/watch?v=GwPyKM2X1EM
664
- Best for: Operator
@@ -76,6 +673,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
673
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
674
- Key CoPilot features shown: Case datastore/artifact uploads, Incident management, Alert triage UI
675
676
+<a id="vid-S2ELWusHcxA"></a>
677
#### Supercharge Open-Source Cybersecurity: Velociraptor + Sigma for Your SIEM
678
- Link: https://www.youtube.com/watch?v=S2ELWusHcxA
679
- Best for: Both
@@ -90,6 +688,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
688
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
689
- Key CoPilot features shown: Velociraptor integration, Sigma rule workflow, SCA visibility, Incident management, Alert triage UI
690
691
+<a id="vid-l9OLtgemYOQ"></a>
692
#### Open Source SIEM Response | Dynamic Endpoint Actions with SOCFortress CoPilot
693
- Link: https://www.youtube.com/watch?v=l9OLtgemYOQ
694
- Best for: Both
@@ -104,6 +703,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
703
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
704
- Key CoPilot features shown: Velociraptor integration, Active response automation, Vulnerability visibility, Incident management, Alert triage UI
705
706
+<a id="vid-R_pG1Gx_7O8"></a>
707
#### Endpoint Investigation Made Easier: New Velociraptor Features in SOCFORTRESS CoPilot
708
- Link: https://www.youtube.com/watch?v=R_pG1Gx_7O8
709
- Best for: Operator
@@ -120,6 +720,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
720
721
### AI Analyst and Assistant Workflows
722
723
+<a id="vid--2srPC-Dw-0"></a>
724
#### AI Analyst for Wazuh Alerts: Revolutionize Your SOC with SOCFortress Copilot!
725
- Link: https://www.youtube.com/watch?v=-2srPC-Dw-0
726
- Best for: Both
@@ -134,6 +735,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
735
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
736
- Key CoPilot features shown: Wazuh integration, AI analyst, AI-assisted investigation
737
738
+<a id="vid-FHjD9QBaLD4"></a>
739
#### AI Agent for Open Source SIEM: Wazuh, Velociraptor + CoPilot!
740
- Link: https://www.youtube.com/watch?v=FHjD9QBaLD4
741
- Best for: Both
@@ -148,6 +750,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
750
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
751
- Key CoPilot features shown: Wazuh integration, Velociraptor integration, AI agent, AI-assisted investigation
752
753
+<a id="vid-QaLrmSgEcLI"></a>
754
#### AI Chatbot Now With Threat Intel, Cyber News, Knowledge Base & Attack Surface!
755
- Link: https://www.youtube.com/watch?v=QaLrmSgEcLI
756
- Best for: Both
@@ -164,6 +767,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
767
768
### Detection Engineering and Response Automation
769
770
+<a id="vid-tguRiVgytso"></a>
771
#### Automate Your SOC: Triggering Alerts with Wazuh Rules via Copilot
772
- Link: https://www.youtube.com/watch?v=tguRiVgytso
773
- Best for: Both
@@ -178,6 +782,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
782
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
783
- Key CoPilot features shown: Wazuh integration, Detection tuning
784
785
+<a id="vid-AH1g3p8s2_o"></a>
786
#### Wazuh Rule Writing With CoPilot AI Module - Handle Your Alert Flooding
787
- Link: https://www.youtube.com/watch?v=AH1g3p8s2_o
788
- Best for: Both
@@ -192,6 +797,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
797
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
798
- Key CoPilot features shown: Wazuh integration, Detection tuning
799
800
+<a id="vid-llm3uSSUhqs"></a>
801
#### Mastering Wazuh's Active Response: Block Malicious IPs with CoPilot & Wazuh!
802
- Link: https://www.youtube.com/watch?v=llm3uSSUhqs
803
- Best for: Both
@@ -206,6 +812,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
812
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
813
- Key CoPilot features shown: Wazuh integration, Active response automation, Detection tuning
814
815
+<a id="vid-Ko5jLfkSCrk"></a>
816
#### Revolutionize Your SIEM Alerts: Integrate CoPilot & Shuffle
817
- Link: https://www.youtube.com/watch?v=Ko5jLfkSCrk
818
- Best for: Both
@@ -220,6 +827,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
827
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
828
- Key CoPilot features shown: Shuffle SOAR integration, Detection tuning
829
830
+<a id="vid-GWTNA-6Z_Tk"></a>
831
#### Tame the Noise: Sigma Exclusions in CoPilot for Velociraptor Alerts
832
- Link: https://www.youtube.com/watch?v=GWTNA-6Z_Tk
833
- Best for: Both
@@ -234,6 +842,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
842
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
843
- Key CoPilot features shown: Velociraptor integration, Sigma rule workflow, Sysmon config management, Detection tuning
844
845
+<a id="vid-XT1d49HTqQw"></a>
846
#### 🚀 Master Sysmon Config Management with CoPilot & Wazuh!
847
- Link: https://www.youtube.com/watch?v=XT1d49HTqQw
848
- Best for: Both
@@ -248,6 +857,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
857
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
858
- Key CoPilot features shown: Wazuh integration, Sysmon config management, Detection tuning
859
860
+<a id="vid-Ogr70DWAeTc"></a>
861
#### Supercharge Wazuh Active Response with CoPilot: No More Limits!
862
- Link: https://www.youtube.com/watch?v=Ogr70DWAeTc
863
- Best for: Both
@@ -262,6 +872,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
872
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
873
- Key CoPilot features shown: Wazuh integration, Active response automation, Detection tuning
874
875
+<a id="vid-TMJOBATTK9M"></a>
876
#### Test Your Wazuh Detection Rules: One-Click Atomic Red Team + Velociraptor + CoPilot
877
- Link: https://www.youtube.com/watch?v=TMJOBATTK9M
878
- Best for: Both
@@ -276,6 +887,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
887
- Shows practical filtering/search techniques for triage speed.
888
- Key CoPilot features shown: Wazuh integration, Velociraptor integration, Atomic Red Team testing, Detection rule management, Detection tuning
889
890
+<a id="vid-tL3oNEx_3M8"></a>
891
#### Simulate Linux Attacks and Tune Detection Rules with Atomic Red Team
892
- Link: https://www.youtube.com/watch?v=tL3oNEx_3M8
893
- Best for: Both
@@ -292,6 +904,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
904
905
### Threat Intelligence, Vulnerability, and Security Posture
906
907
+<a id="vid-FJunzP2c_mQ"></a>
908
#### Auto-Enrich Wazuh Events with Threat Intel Feeds!
909
- Link: https://www.youtube.com/watch?v=FJunzP2c_mQ
910
- Best for: Both
@@ -306,6 +919,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
919
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
920
- Key CoPilot features shown: Wazuh integration, Enrichment workflows
921
922
+<a id="vid-CVVj9HRtjOE"></a>
923
#### Analyzing Processes in Wazuh Alerts with Advanced Risk Scoring from Global Data
924
- Link: https://www.youtube.com/watch?v=CVVj9HRtjOE
925
- Best for: Both
@@ -319,6 +933,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
933
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
934
- Key CoPilot features shown: Wazuh integration, Enrichment workflows
935
936
+<a id="vid-G3MDJSMvnRo"></a>
937
#### Simplify Cloud Security: ScoutSuite and Copilot Tutorial
938
- Link: https://www.youtube.com/watch?v=G3MDJSMvnRo
939
- Best for: Both
@@ -332,6 +947,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
947
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
948
- Key CoPilot features shown: SCA visibility, Enrichment workflows
949
950
+<a id="vid-Qnm9SXVJGWw"></a>
951
#### Integrate EPSS with Wazuh for Top-Notch Vulnerability Management!
952
- Link: https://www.youtube.com/watch?v=Qnm9SXVJGWw
953
- Best for: Both
@@ -344,6 +960,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
960
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
961
- Key CoPilot features shown: Wazuh integration, EPSS enrichment, Vulnerability visibility, Enrichment workflows
962
963
+<a id="vid--SVHKuQUxlI"></a>
964
#### Enhancing Web App Security: Integrating Copilot with Nuclei for Vulnerability Scanning
965
- Link: https://www.youtube.com/watch?v=-SVHKuQUxlI
966
- Best for: Both
@@ -358,6 +975,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
975
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
976
- Key CoPilot features shown: DUO MFA ingestion, Nuclei scanning integration, SCA visibility, Vulnerability visibility, Enrichment workflows
977
978
+<a id="vid-fNybop2FTRE"></a>
979
#### Boost CoPilot: IoCs from Wazuh + VirusTotal Enrichment
980
- Link: https://www.youtube.com/watch?v=fNybop2FTRE
981
- Best for: Both
@@ -372,6 +990,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
990
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
991
- Key CoPilot features shown: Wazuh integration, VirusTotal enrichment, Enrichment workflows
992
993
+<a id="vid-ixxVe_9LAfQ"></a>
994
#### CoPilot + VirusTotal: Instantly Scan Files for Malware!
995
- Link: https://www.youtube.com/watch?v=ixxVe_9LAfQ
996
- Best for: Both
@@ -386,6 +1005,7 @@ Alert triage, case work, investigations, and day-to-day SOC workflows.
1005
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1006
- Key CoPilot features shown: VirusTotal enrichment, SCA visibility, Enrichment workflows
1007
1008
+<a id="vid-NUrnlTvLzVk"></a>
1009
#### CoPilot Supercharges Wazuh with SCA & Vulnerability Overviews
1010
- Link: https://www.youtube.com/watch?v=NUrnlTvLzVk
1011
- Best for: Both
@@ -406,6 +1026,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1026
1027
### Start Here: Platform Overview and Installation
1028
1029
+<a id="vid-qQbex2zAhWI"></a>
1030
#### Copilot - Your Open Source Security Integrator
1031
- Link: https://www.youtube.com/watch?v=qQbex2zAhWI
1032
- Best for: Admin-Engineer
@@ -418,6 +1039,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1039
- Provides a concise end-to-end example that connects configuration, validation, and operational usage.
1040
- Key CoPilot features shown: Platform onboarding
1041
1042
+<a id="vid-CQolYA30Gls"></a>
1043
#### Copilot - Your Next Open Source Security Tool
1044
- Link: https://www.youtube.com/watch?v=CQolYA30Gls
1045
- Best for: Admin-Engineer
@@ -432,6 +1054,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1054
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1055
- Key CoPilot features shown: Grafana integration, Shuffle SOAR integration, Platform onboarding
1056
1057
+<a id="vid-seITDGXAiJw"></a>
1058
#### CoPilot Install
1059
- Link: https://www.youtube.com/watch?v=seITDGXAiJw
1060
- Best for: Admin-Engineer
@@ -446,6 +1069,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1069
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1070
- Key CoPilot features shown: Platform onboarding
1071
1072
+<a id="vid-7dUHSMWWTuY"></a>
1073
#### CoPilot Install -- Final Update (I Hope)
1074
- Link: https://www.youtube.com/watch?v=7dUHSMWWTuY
1075
- Best for: Admin-Engineer
@@ -462,6 +1086,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1086
1087
### Core SOC Workflows: Alerting, Case Management, and Investigations
1088
1089
+<a id="vid-euFrHP0VkD8"></a>
1090
#### Wazuh Content Pack For Graylog - Easily Configure Your SOCFortress SIEM Stack
1091
- Link: https://www.youtube.com/watch?v=euFrHP0VkD8
1092
- Best for: Both
@@ -476,6 +1101,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1101
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1102
- Key CoPilot features shown: Wazuh integration, Graylog connector, Grafana integration, Incident management, Alert triage UI
1103
1104
+<a id="vid-ffAnV31Ne54"></a>
1105
#### Wazuh Security Configuration Assessment and CoPilot - Are Your Endpoints Compliant?
1106
- Link: https://www.youtube.com/watch?v=ffAnV31Ne54
1107
- Best for: Both
@@ -490,6 +1116,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1116
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1117
- Key CoPilot features shown: Wazuh integration, SCA visibility, Incident management, Alert triage UI
1118
1119
+<a id="vid-S2ELWusHcxA"></a>
1120
#### Supercharge Open-Source Cybersecurity: Velociraptor + Sigma for Your SIEM
1121
- Link: https://www.youtube.com/watch?v=S2ELWusHcxA
1122
- Best for: Both
@@ -504,6 +1131,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1131
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1132
- Key CoPilot features shown: Velociraptor integration, Sigma rule workflow, SCA visibility, Incident management, Alert triage UI
1133
1134
+<a id="vid-31lCr80-NVM"></a>
1135
#### Manage Wazuh Detection Rules with CoPilot
1136
- Link: https://www.youtube.com/watch?v=31lCr80-NVM
1137
- Best for: Admin-Engineer
@@ -518,6 +1146,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1146
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1147
- Key CoPilot features shown: Wazuh integration, Detection rule management, Incident management, Alert triage UI
1148
1149
+<a id="vid-l9OLtgemYOQ"></a>
1150
#### Open Source SIEM Response | Dynamic Endpoint Actions with SOCFortress CoPilot
1151
- Link: https://www.youtube.com/watch?v=l9OLtgemYOQ
1152
- Best for: Both
@@ -534,6 +1163,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1163
1164
### AI Analyst and Assistant Workflows
1165
1166
+<a id="vid--2srPC-Dw-0"></a>
1167
#### AI Analyst for Wazuh Alerts: Revolutionize Your SOC with SOCFortress Copilot!
1168
- Link: https://www.youtube.com/watch?v=-2srPC-Dw-0
1169
- Best for: Both
@@ -548,6 +1178,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1178
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1179
- Key CoPilot features shown: Wazuh integration, AI analyst, AI-assisted investigation
1180
1181
+<a id="vid-FHjD9QBaLD4"></a>
1182
#### AI Agent for Open Source SIEM: Wazuh, Velociraptor + CoPilot!
1183
- Link: https://www.youtube.com/watch?v=FHjD9QBaLD4
1184
- Best for: Both
@@ -562,6 +1193,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1193
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1194
- Key CoPilot features shown: Wazuh integration, Velociraptor integration, AI agent, AI-assisted investigation
1195
1196
+<a id="vid-QaLrmSgEcLI"></a>
1197
#### AI Chatbot Now With Threat Intel, Cyber News, Knowledge Base & Attack Surface!
1198
- Link: https://www.youtube.com/watch?v=QaLrmSgEcLI
1199
- Best for: Both
@@ -578,6 +1210,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1210
1211
### Detection Engineering and Response Automation
1212
1213
+<a id="vid-tguRiVgytso"></a>
1214
#### Automate Your SOC: Triggering Alerts with Wazuh Rules via Copilot
1215
- Link: https://www.youtube.com/watch?v=tguRiVgytso
1216
- Best for: Both
@@ -592,6 +1225,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1225
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1226
- Key CoPilot features shown: Wazuh integration, Detection tuning
1227
1228
+<a id="vid-AH1g3p8s2_o"></a>
1229
#### Wazuh Rule Writing With CoPilot AI Module - Handle Your Alert Flooding
1230
- Link: https://www.youtube.com/watch?v=AH1g3p8s2_o
1231
- Best for: Both
@@ -606,6 +1240,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1240
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1241
- Key CoPilot features shown: Wazuh integration, Detection tuning
1242
1243
+<a id="vid-llm3uSSUhqs"></a>
1244
#### Mastering Wazuh's Active Response: Block Malicious IPs with CoPilot & Wazuh!
1245
- Link: https://www.youtube.com/watch?v=llm3uSSUhqs
1246
- Best for: Both
@@ -620,6 +1255,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1255
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1256
- Key CoPilot features shown: Wazuh integration, Active response automation, Detection tuning
1257
1258
+<a id="vid-Ko5jLfkSCrk"></a>
1259
#### Revolutionize Your SIEM Alerts: Integrate CoPilot & Shuffle
1260
- Link: https://www.youtube.com/watch?v=Ko5jLfkSCrk
1261
- Best for: Both
@@ -634,6 +1270,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1270
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1271
- Key CoPilot features shown: Shuffle SOAR integration, Detection tuning
1272
1273
+<a id="vid-GWTNA-6Z_Tk"></a>
1274
#### Tame the Noise: Sigma Exclusions in CoPilot for Velociraptor Alerts
1275
- Link: https://www.youtube.com/watch?v=GWTNA-6Z_Tk
1276
- Best for: Both
@@ -648,6 +1285,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1285
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1286
- Key CoPilot features shown: Velociraptor integration, Sigma rule workflow, Sysmon config management, Detection tuning
1287
1288
+<a id="vid-XT1d49HTqQw"></a>
1289
#### 🚀 Master Sysmon Config Management with CoPilot & Wazuh!
1290
- Link: https://www.youtube.com/watch?v=XT1d49HTqQw
1291
- Best for: Both
@@ -662,6 +1300,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1300
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1301
- Key CoPilot features shown: Wazuh integration, Sysmon config management, Detection tuning
1302
1303
+<a id="vid-Ogr70DWAeTc"></a>
1304
#### Supercharge Wazuh Active Response with CoPilot: No More Limits!
1305
- Link: https://www.youtube.com/watch?v=Ogr70DWAeTc
1306
- Best for: Both
@@ -676,6 +1315,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1315
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1316
- Key CoPilot features shown: Wazuh integration, Active response automation, Detection tuning
1317
1318
+<a id="vid-TMJOBATTK9M"></a>
1319
#### Test Your Wazuh Detection Rules: One-Click Atomic Red Team + Velociraptor + CoPilot
1320
- Link: https://www.youtube.com/watch?v=TMJOBATTK9M
1321
- Best for: Both
@@ -690,6 +1330,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1330
- Shows practical filtering/search techniques for triage speed.
1331
- Key CoPilot features shown: Wazuh integration, Velociraptor integration, Atomic Red Team testing, Detection rule management, Detection tuning
1332
1333
+<a id="vid-tL3oNEx_3M8"></a>
1334
#### Simulate Linux Attacks and Tune Detection Rules with Atomic Red Team
1335
- Link: https://www.youtube.com/watch?v=tL3oNEx_3M8
1336
- Best for: Both
@@ -706,6 +1347,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1347
1348
### Integrations and Log Ingestion
1349
1350
+<a id="vid-MKqByrkDqZU"></a>
1351
#### Wazuh Indexer and CoPilot Integration
1352
- Link: https://www.youtube.com/watch?v=MKqByrkDqZU
1353
- Best for: Admin-Engineer
@@ -720,6 +1362,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1362
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1363
- Key CoPilot features shown: Wazuh integration, Connector onboarding
1364
1365
+<a id="vid-MyvPmQ4Cfb0"></a>
1366
#### Graylog and CoPilot Integration
1367
- Link: https://www.youtube.com/watch?v=MyvPmQ4Cfb0
1368
- Best for: Admin-Engineer
@@ -734,6 +1377,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1377
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1378
- Key CoPilot features shown: Graylog connector, Connector onboarding
1379
1380
+<a id="vid-iI6yKgKC5wk"></a>
1381
#### Wazuh Manager and CoPilot Integration
1382
- Link: https://www.youtube.com/watch?v=iI6yKgKC5wk
1383
- Best for: Admin-Engineer
@@ -747,6 +1391,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1391
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1392
- Key CoPilot features shown: Wazuh integration, Connector onboarding
1393
1394
+<a id="vid--Cqyczg6ELE"></a>
1395
#### Velociraptor and Copilot Integration
1396
- Link: https://www.youtube.com/watch?v=-Cqyczg6ELE
1397
- Best for: Admin-Engineer
@@ -760,6 +1405,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1405
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1406
- Key CoPilot features shown: Velociraptor integration, Connector onboarding
1407
1408
+<a id="vid-vt6M1SzNfjE"></a>
1409
#### CoPilot And InfluxDB - Monitor Your SIEM Stack Servers with InfluxDB and CoPilot!
1410
- Link: https://www.youtube.com/watch?v=vt6M1SzNfjE
1411
- Best for: Admin-Engineer
@@ -774,6 +1420,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1420
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1421
- Key CoPilot features shown: Grafana integration, InfluxDB metrics integration, Connector onboarding
1422
1423
+<a id="vid-n9koQ1UL-L0"></a>
1424
#### DFIR-IRIS and CoPilot - Bring your SOC Alerts into CoPilot
1425
- Link: https://www.youtube.com/watch?v=n9koQ1UL-L0
1426
- Best for: Admin-Engineer
@@ -788,6 +1435,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1435
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1436
- Key CoPilot features shown: Built-in case management, SCA visibility, Connector onboarding
1437
1438
+<a id="vid-FOOU1PQnd7g"></a>
1439
#### Grafana and CoPilot Integration
1440
- Link: https://www.youtube.com/watch?v=FOOU1PQnd7g
1441
- Best for: Admin-Engineer
@@ -801,6 +1449,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1449
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1450
- Key CoPilot features shown: Grafana integration, Connector onboarding
1451
1452
+<a id="vid-ihj2F2rA6BQ"></a>
1453
#### Seamless Office365 Integration with Wazuh: Simplified by Copilot
1454
- Link: https://www.youtube.com/watch?v=ihj2F2rA6BQ
1455
- Best for: Admin-Engineer
@@ -815,6 +1464,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1464
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1465
- Key CoPilot features shown: Wazuh integration, Office 365 connector, Connector onboarding
1466
1467
+<a id="vid-YOVUOpZDEzM"></a>
1468
#### Unlock Full SIEM Potential: Effortlessly Ingest Crowdstrike Events Into Your Open Source SIEM!
1469
- Link: https://www.youtube.com/watch?v=YOVUOpZDEzM
1470
- Best for: Admin-Engineer
@@ -829,6 +1479,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1479
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1480
- Key CoPilot features shown: CrowdStrike ingestion, Customer portal, Connector onboarding
1481
1482
+<a id="vid-tgWRvOJX5HA"></a>
1483
#### CoPilot Event Shipper Configuration - Ingest 3rd Party Logs into your SIEM Stack
1484
- Link: https://www.youtube.com/watch?v=tgWRvOJX5HA
1485
- Best for: Admin-Engineer
@@ -842,6 +1493,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1493
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1494
- Key CoPilot features shown: DUO MFA ingestion, Event shipper, Connector onboarding
1495
1496
+<a id="vid-chTthkpMpTY"></a>
1497
#### Unlock Full SIEM Potential: Effortlessly Ingest DUO MFA Events Into Your Open Source SIEM!
1498
- Link: https://www.youtube.com/watch?v=chTthkpMpTY
1499
- Best for: Admin-Engineer
@@ -856,6 +1508,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1508
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1509
- Key CoPilot features shown: DUO MFA ingestion, Event shipper, Connector onboarding
1510
1511
+<a id="vid-wK4aA7QrXmE"></a>
1512
#### New MITRE ATT&CK Integration in CoPilot – Game Changer for SOC Analysts!
1513
- Link: https://www.youtube.com/watch?v=wK4aA7QrXmE
1514
- Best for: Admin-Engineer
@@ -870,6 +1523,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1523
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1524
- Key CoPilot features shown: MITRE ATT&CK mapping, Connector onboarding
1525
1526
+<a id="vid-O5SaFwAMMtA"></a>
1527
#### Supercharge Your Log Ingestion: Webhooks to SIEM Made Easy
1528
- Link: https://www.youtube.com/watch?v=O5SaFwAMMtA
1529
- Best for: Admin-Engineer
@@ -886,6 +1540,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1540
1541
### Threat Intelligence, Vulnerability, and Security Posture
1542
1543
+<a id="vid-FJunzP2c_mQ"></a>
1544
#### Auto-Enrich Wazuh Events with Threat Intel Feeds!
1545
- Link: https://www.youtube.com/watch?v=FJunzP2c_mQ
1546
- Best for: Both
@@ -900,6 +1555,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1555
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1556
- Key CoPilot features shown: Wazuh integration, Enrichment workflows
1557
1558
+<a id="vid-CVVj9HRtjOE"></a>
1559
#### Analyzing Processes in Wazuh Alerts with Advanced Risk Scoring from Global Data
1560
- Link: https://www.youtube.com/watch?v=CVVj9HRtjOE
1561
- Best for: Both
@@ -913,6 +1569,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1569
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1570
- Key CoPilot features shown: Wazuh integration, Enrichment workflows
1571
1572
+<a id="vid-G3MDJSMvnRo"></a>
1573
#### Simplify Cloud Security: ScoutSuite and Copilot Tutorial
1574
- Link: https://www.youtube.com/watch?v=G3MDJSMvnRo
1575
- Best for: Both
@@ -926,6 +1583,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1583
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1584
- Key CoPilot features shown: SCA visibility, Enrichment workflows
1585
1586
+<a id="vid-Qnm9SXVJGWw"></a>
1587
#### Integrate EPSS with Wazuh for Top-Notch Vulnerability Management!
1588
- Link: https://www.youtube.com/watch?v=Qnm9SXVJGWw
1589
- Best for: Both
@@ -938,6 +1596,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1596
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1597
- Key CoPilot features shown: Wazuh integration, EPSS enrichment, Vulnerability visibility, Enrichment workflows
1598
1599
+<a id="vid--SVHKuQUxlI"></a>
1600
#### Enhancing Web App Security: Integrating Copilot with Nuclei for Vulnerability Scanning
1601
- Link: https://www.youtube.com/watch?v=-SVHKuQUxlI
1602
- Best for: Both
@@ -952,6 +1611,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1611
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1612
- Key CoPilot features shown: DUO MFA ingestion, Nuclei scanning integration, SCA visibility, Vulnerability visibility, Enrichment workflows
1613
1614
+<a id="vid-fNybop2FTRE"></a>
1615
#### Boost CoPilot: IoCs from Wazuh + VirusTotal Enrichment
1616
- Link: https://www.youtube.com/watch?v=fNybop2FTRE
1617
- Best for: Both
@@ -966,6 +1626,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1626
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1627
- Key CoPilot features shown: Wazuh integration, VirusTotal enrichment, Enrichment workflows
1628
1629
+<a id="vid-ixxVe_9LAfQ"></a>
1630
#### CoPilot + VirusTotal: Instantly Scan Files for Malware!
1631
- Link: https://www.youtube.com/watch?v=ixxVe_9LAfQ
1632
- Best for: Both
@@ -980,6 +1641,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1641
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1642
- Key CoPilot features shown: VirusTotal enrichment, SCA visibility, Enrichment workflows
1643
1644
+<a id="vid-NUrnlTvLzVk"></a>
1645
#### CoPilot Supercharges Wazuh with SCA & Vulnerability Overviews
1646
- Link: https://www.youtube.com/watch?v=NUrnlTvLzVk
1647
- Best for: Both
@@ -996,6 +1658,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1658
1659
### Operations, Reporting, and Customer Experience
1660
1661
+<a id="vid-hC0JHY5WF-U"></a>
1662
#### Wazuh Dashboards in Grafana & Customer Provisioning in CoPilot!
1663
- Link: https://www.youtube.com/watch?v=hC0JHY5WF-U
1664
- Best for: Admin-Engineer
@@ -1010,6 +1673,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1673
- Includes practical walkthrough steps that can be replicated in production-like SOC environments.
1674
- Key CoPilot features shown: Wazuh integration, Grafana integration, Multi-tenant operations
1675
1676
+<a id="vid-9xHr5-Wlypw"></a>
1677
#### Create Custom PDF Reports in Grafana Detailing Security Events | Share with Your Clients!
1678
- Link: https://www.youtube.com/watch?v=9xHr5-Wlypw
1679
- Best for: Admin-Engineer
@@ -1024,6 +1688,7 @@ Connecting sources, configuring integrations, tuning detections, reporting, and
1688
- Emphasizes outcomes analysts/admins should verify after each configuration or workflow change.
1689
- Key CoPilot features shown: Grafana integration, Reporting workflow, Multi-tenant operations
1690
1691
+<a id="vid-_bvFejcFwFM"></a>
1692
#### A Customer Portal for Your Open-Source SIEM Stack
1693
- Link: https://www.youtube.com/watch?v=_bvFejcFwFM
1694
- Best for: Admin-Engineer