Local tier-1 SOC triage on Wazuh with a fine-tuned Gemma 4

Kezekshi is an open-source, locally run first-line triage system for Wazuh security alerts, published on Show HN by its author (oleg-vdv). Deterministic rules suppress noise, and a LoRA-fine-tuned Gemma 4 E2B drafts analyst cards for ambiguous alerts, with no data sent externally.