Configured the collection of security events from Windows systems to SIEM Wazuh. Created dashboards for monitoring critical events (logon, script execution, security policy changes). This increased the level of visibility of events and reduced the response time to incidents.