1 TERM
2 CODE
3 SOC
4
5
kitty — zsh ~/kawesqar/soc-infra
CPU 37%
RAM 6.1G
NET ↓1.2M ↑88K
TEMP 64°C
3 ALERTS · SOC
🔒🔊📶🔋 88%
jue 28 ago · 23:41
⌘K
01 TERMINAL
kitty ›
▸ nueva sesión
▸ tmux attach
▸ ssh · mercurius-soc
▸ perfil: kawesqar-dark
alacritty ⌘⏎
tmux · sesiones activas 3
02 DEV
helix
neovim
lazygit
03 CIBER
wazuh dashboard
nmap / recon
vault · secretos
04 AI
claude code
model runner local
05 SYSTEM
preferencias kawésqar
apariencia / tema
apagar / suspender
run> soc-
◆ soc-dashboard.sh script
◇ soc-tunnel-mux bin
◇ soc-report-daily script
◇ soc-alert-triage script
⛭ WAZUH ALERT dunst · ahora
rule 5710 — múltiples fallos SSH desde 10.20.4.18. Nivel 9.
hx soc_infra/deploy.rs
14
15
16
17
18
19
20
21
22
// despliegue libvirt multi-cliente
fn deploy_node(cfg: &NodeConfig) -> Result<()> {
  let tunnel = Mux::connect("mercurius-soc")?;
  let vm = tunnel.spawn("kawesqar-micro", 4, 8192)?;
  if vm.status() == Status::Ready {
    harden(&vm)?;
    // aplica perfil ember + firewall base
  }
  Ok(())
}
NORdeploy.rsrust · utf-8 · 22:9
kitty zsh

~/kawesqar/soc-infra on main

❯ ./tunnel-mux.sh status

✓ túnel multiplexado activo — 3 sesiones sobre 1 socket

# mapa de servidores CORREGIDO 2026-08-27

❯ wazuh-cli alerts --level >=9 --since 1h

⚠ 3 alertas nivel alto · ssh_bruteforce x2, mitre T1110

❯ deploy --node soc-04 --profile hardened

~/kawesqar/soc-infra on main

KAWÉSQAR OS · BLACKBOX REVIVED · PRO/DARK