Monitor Wazuh SIEM with threat intel, network device logs, custom rules, active response, and Dockerized syslog collection