Publication Identity
Alerts to Answers: Good Findings Fast with Wazuh, Suricata and More is an independent educational publication authored by Jim Furstenberg and published by Kalos Cybersecurity LLC.
Jim Furstenberg, Ph.D., P.I. | Professor
CISSP, C|EH, CCSA, LRSA, C|ND, C)PTE, CNA, CLFE, ACE, C|SCU, MLCT
Hackers never q!
“In GOD we trust. All others must bring data.” — attributed to W. Edwards Deming
Copyright
© 2026 Jim Furstenberg, Ph.D., P.I., and Kalos Cybersecurity LLC. All rights reserved. This publication and its companion website are independently authored and published as part of the Alerts to Answers educational series.
Independence and Non-Endorsement
This publication is independently produced. Unless expressly stated in writing, it is not affiliated with, authorized by, sponsored by, certified by, approved by, or endorsed by any third-party organization, foundation, project, product vendor, trademark owner, or standards body identified in the text.
References to third-party products, services, frameworks, standards, projects, and organizations are provided for lawful educational, descriptive, and interoperability purposes. They identify the technologies used in the laboratory and do not imply a commercial relationship, partnership, certification, or endorsement.
MITRE ATT&CK® License and Attribution
The MITRE Corporation (MITRE) hereby grants you a non-exclusive, royalty-free license to use ATT&CK® for research, development, and commercial purposes. Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. The first reference in a chapter or major section uses MITRE ATT&CK®; subsequent references may use ATT&CK without the registered-trademark symbol. MITRE has not reviewed, approved, sponsored, or endorsed this publication.
MITRE does not represent that ATT&CK documents every possible adversary action or behavior. Mapping detections, controls, or observations to ATT&CK techniques does not by itself establish complete defensive coverage.
Current governing terms and branding guidance are available at:
Product and Project Names
Wazuh and its associated branding are owned by Wazuh, Inc. References to Wazuh identify the software platform used in the educational laboratory. Wazuh has not sponsored, certified, approved, or endorsed this publication. Wazuh trademark and brand guidance is available at https://wazuh.com/legal-resources/trademark-policy/.
Suricata is a trademark of Open Information Security Foundation Inc. References to Suricata identify the open-source network threat-detection technology used in the educational laboratory. Open Information Security Foundation has not sponsored, certified, approved, or endorsed this publication. Suricata source code and Suricata documentation may be governed by different licenses; any permitted reproduction or adaptation must comply with the license applicable to the specific material.
Security Onion and Security Onion Solutions are registered marks of Security Onion Solutions, LLC. Their appearance as plain-text references identifies technologies discussed in the laboratory. No Security Onion logo is licensed or reproduced by this notice, and no affiliation or endorsement is claimed.
Microsoft, Windows, Windows 11, Windows PowerShell, PowerShell, Microsoft Defender, and Sysinternals are trademarks of the Microsoft group of companies. Microsoft has not reviewed, authorized, sponsored, approved, or endorsed this independent publication. Microsoft logos, product icons, and other graphical brand assets are not licensed by this notice.
VMware and related VMware product names are trademarks of Broadcom Inc. or its subsidiaries. Ubuntu is a trademark of Canonical Ltd. Kali Linux is a trademark of OffSec Services Limited. Linux is the registered trademark of Linus Torvalds in the United States and other countries. Other company, organization, product, service, and project names may be trademarks or registered trademarks of their respective owners.
All trademarks remain the property of their respective owners. They are used here solely to identify the technologies discussed or used in the educational exercises. No ownership of any third-party mark is claimed.
Third-Party Content and Licenses
Attribution of a name or trademark does not grant permission to reproduce copyrighted documentation, software, rulesets, artwork, screenshots, logos, icons, or other protected material. Where third-party material is reproduced, adapted, or distributed, the applicable license, permission, and source attribution must be identified with that material or in the consolidated references.
Descriptions of technical concepts, procedures, configurations, and observed outputs are presented as original educational explanations unless a source is expressly cited. Readers and instructors should obtain third-party software and documentation from the official publisher or project source and comply with the applicable license and terms of use.
Accuracy, Versions, and Educational Use
Product capabilities, interfaces, documentation, licenses, and trademark policies can change. The publication identifies version-pinned laboratory components where practical, but readers should consult the official publisher's current documentation and legal terms before relying on a procedure or redistributing third-party material.
The technical material in this publication is provided for lawful education, research, administration, and defensive-security practice in systems the reader owns or is expressly authorized to test. Readers are responsible for complying with applicable laws, institutional policies, software licenses, and authorization requirements.
AI-Assisted Editorial Development
ChatGPT by OpenAI, Claude by Anthropic, Kimi by Moonshot AI, and Grok by xAI were used as editorial-support tools during brainstorming, drafting, comparison, or review activities (Anthropic, n.d.; Moonshot AI, n.d.; OpenAI, n.d.; xAI, n.d.). These systems are identified for transparency, not cited as authoritative evidence for technical or historical claims. The author retained responsibility for source selection, factual verification, instructional judgment, revisions, and the final published content.
Errata and Corrections
Readers who identify a factual error, broken link, version discrepancy, typographical error, or laboratory reproducibility issue are encouraged to report it to AlertsToAnswers@pm.me. Please include the book edition, chapter and section or webpage URL, a concise description of the issue, and any supporting evidence that will help reproduce or verify it. Confirmed corrections will be evaluated for inclusion in a future revision or published errata notice.
Notice Administration
Questions or correction requests concerning attribution may also be directed to AlertsToAnswers@pm.me.
This notice is intended to document attribution, ownership, independence, and educational use. It is not legal advice and does not replace licenses, written permissions, or review by qualified counsel.