Diseño e implementación de un sistema SIEM con Wazuh para la detección proactiva de amenazas cibernéticas en la empresa ECOILPET S.A.

Abstract

This thesis presents the design and implementation of a Security Information and Event Management (SIEM) system using Wazuh to enhance cybersecurity at ECOILPET S.A. The solution centralizes logs, correlates events, and generates real-time alerts, combining Windows agents with agentless monitoring for network devices. Its effectiveness was validated through controlled attack simulations using MITRE Caldera, and compliance with ISO/IEC 27001 and Ecuador’s Organic Law on Personal Data Protection (LOPDP) was assessed. Results show that Wazuh is a viable, scalable, and cost-effective option for protecting medium sized business environments, strengthening digital asset defense and regulatory compliance.