

* docker events & ids

https://igorsec.blog/2023/08/19/wazuh-part-4-proof-of-concept-ubuntu-endpoint-part-1-of-3/
https://igorsec.blog/2023/08/26/wazuh-part-4-proof-of-concept-ubuntu-endpoint-part-2-of-3/
https://igorsec.blog/2023/09/03/wazuh-part-4-proof-of-concept-ubuntu-endpoint-part-3-of-3/
