diff --git a/assets/security-monitoring-alert-flow.svg b/assets/security-monitoring-alert-flow.svg index 45c4393..b1c116b 100644 --- a/assets/security-monitoring-alert-flow.svg +++ b/assets/security-monitoring-alert-flow.svg @@ -1,4 +1,4 @@ -
Fleet Host
Wazuh agent installed
DETECTION LAYERS
SCA compliance scoring
12h benchmark scan
File integrity monitoring
12h scan cycle
Rootkit / anomaly
heuristics
Alert fires
Matches a known,
root-caused pattern?
Runbook entry
no re-investigation
Investigated fresh
wazuh-logtest + direct index query
yes
no
becomes routine
Known — straight to runbook
Unknown — investigated fresh
Fresh finding folded back in
 \ No newline at end of file +
Fleet Host
Wazuh agent installed
DETECTION LAYERS
SCA compliance scoring
12h benchmark scan
File integrity monitoring
12h scan cycle
Rootkit / anomaly
heuristics
Alert fires
Matches a known,
root-caused pattern?
Runbook entry
no re-investigation
Investigated fresh
wazuh-logtest + direct index query
yes
no
becomes routine
Known — straight to runbook
Unknown — investigated fresh
Fresh finding folded back in
 \ No newline at end of file