Overview
Wazuh - SQL Injection Analysis is a web attack detection lab about triaging suspicious database attack attempts from security telemetry.
The scenario looks at SQL injection from the defender's side. A SOC analyst needs to inspect the alert, request context, source behavior, affected parameter, and nearby events to decide whether the activity is scanning, probing, or likely exploitation.
This lab helps learners practice application-layer alert review, SQL injection indicator interpretation, and the link between web vulnerability knowledge and defensive monitoring.
Related Labs
Related trainings
