This four-day training course is designed for security engineers and consultants responsible for implementing, configuring, and operating a Wazuh HIDS/SIEM system. It covers all the main components of Wazuh, and how to get the most out of them. Special focus is given to tuning the Wazuh ruleset by creating custom rules and decoders. You will get direct experience with many of the Wazuh features, and learn many ways to bring these features together synergistically for advanced purposes. This course consists of lectures and hands-on exercises performed in a virtual lab environment provided to you by our team. The exercises teach you to perform configuration and operational tasks by following procedures laid out in provided lab guides, to exercise the features in focus throughout the training. Throughout the course, you will have unrestricted access to your lab environment which will continue to be available for additional practice 24 hours after the class ends. Comprehensive course materials containing theory and practical exercises will be provided during the course. Copies of the slide decks will also be provided at the end of the training