Protecting GitLab as a Crown Jewel: Security Logs, Dashboards, and Alerts with Wazuh

pratik.dabhi.4u@gmail.com (Pratik) — Sun, 13 Sep 2026 17:00:00 +0530

For an organization that builds software, GitLab can be one of its crown jewels. It may hold proprietary source code, internal architecture, deployment configuration, and customer information in issues, attachments, or repository files. Depending on permissions and how delivery is configured, access to GitLab can also provide a way to change what the organization builds and deploys.

From IOC Lists to Firewall Blocks: Building a Threat Feed Pipeline Without a Paid Subscription — Part 2

pratik.dabhi.4u@gmail.com (Pratik) — Sat, 08 Aug 2026 00:00:00 +0530

The first post ended with a blind spot.

Pramaan, an Argusoft SaaS application, was publishing the feed. Sophos was consuming it. The firewall was dropping known-bad traffic on the paths where threat-feed evaluation actually applied.

Wazuh on Pratik’s Localhost

Protecting GitLab as a Crown Jewel: Security Logs, Dashboards, and Alerts with Wazuh

From IOC Lists to Firewall Blocks: Building a Threat Feed Pipeline Without a Paid Subscription — Part 2