Webinar Description
Key Takeaways
- Demonstrates how to accelerate SOC alert triage by combining Claude, Wazuh and Shodan
- Covers natural language querying for threat identification within Wazuh
- Shows how to enrich alerts with IP address intelligence from Shodan
- Explains mapping security findings to the MITRE ATT&CK framework
About the Event
This webinar, scheduled for 10 November 2026, examines how security operations teams can use AI assistance to investigate alerts more efficiently. Security Engineer Efam Harris will present a workflow that integrates three tools: the Wazuh security platform, the Shodan internet intelligence service and the Claude AI assistant.
Integrating Wazuh, Shodan and Claude for Alert Investigation
The session will demonstrate how analysts can use natural language to query and interpret security alerts within Wazuh, reducing the time required to identify potential threats. When alerts flag suspicious IP addresses, Shodan provides additional context about the infrastructure involved. Claude then assists analysts by correlating evidence, explaining the nature of detected activity and mapping findings to MITRE ATT&CK techniques.
This approach addresses a common SOC challenge: the volume of alerts often exceeds the capacity of security teams to investigate each one thoroughly. By combining open source security monitoring, internet scanning data and AI reasoning, analysts can prioritise and understand threats more quickly.
Who Should Attend
The webinar is suited to SOC analysts, security engineers and threat hunters interested in practical applications of AI for alert triage. Familiarity with Wazuh or similar SIEM platforms would be beneficial. A live Q&A session will follow the presentation.