▲ 2 r/Wazuh+1 crosspostsSOC question – Wazuh/Sysmon PowerShell alert, true positive or false positive?[supprimé] reddit.com u/NullTraceReal — 5 days ago