Module 7: Automation, Quality, and Deployment

Build validation pipelines, CI/CD workflows, and API-first deployment — ship detections like software.

3 lessons · 2 labs

SigmaWazuh

Path

  1. 01
    Lesson

    Lesson 7.1 — Building a Validation Pipeline

    Syntax checks, semantic validation, MITRE mapping verification, and automated quality gates for detection rules.

  2. 02
    Lab

    Lab 7.1 — Build Quality Gates

    Create a validation script that checks Sigma rules for syntax errors, required metadata fields, MITRE mapping, and naming conventions.

  3. 03
    Lesson

    Lesson 7.2 — CI/CD for Detection Rules

    GitHub Actions workflows, automated testing, deployment gates, and version control for detection-as-code.

  4. 04
    Lab

    Lab 7.2 — CI/CD Pipeline for Detections

    Build a GitHub Actions workflow that lints, converts, and validates Sigma rules on every pull request — detection-as-code in practice.

  5. 05
    Lesson

    Lesson 7.3 — API-First Rule Deployment

    Wazuh Manager API, dry-run concepts, rollback strategies, and programmatic rule management.