Wazuh: SIEM Architecture, Agents & Detection Rules

Wazuh manager/indexer/dashboard architecture, agent deployment, custom detection rules, alert tuning, and the operational dashboard workflow.