Search for a command to run...
Series
Summary of technical articles on using Wazuh
OPNsense Logs in Wazuh: Matching pfSense Rules and the Need for Custom Parsing 1. Problem Summary When forwarding logs from OPNsense to Wazuh, many entries are matched by existing decoders/rules (mostly written for pfSense/pf), leading to: Wazuh ass...
Study and Optimization of Maltrail Rule in Wazuh 1. Introduction Maltrail is an open-source network threat detection system focused on monitoring suspicious network traffic, such as connections to long domains, unusual IPs, or heuristic patterns from...
Summary of Custom Wazuh Rulesets on GitHub Below is a personal collection of custom Wazuh rulesets gathered from various community and organizational sources. These rules can be used for reference, customization, or direct application in your own set...
Wazuh is a free and open source security monitoring platform that protects IT assets against threats that target the core pillars of cybersecurity. It is a unified XDR and SIEM that helps you monitor and promptly respond to security incidents across ...
Security operations require a centralized view of logs, alerts, and network activities. That's where Wazuh shines—bringing visibility, correlation, and automation in one place. In this guide, I'll walk through how to integrate Wazuh with pfSense (fir...
Once your Wazuh server is up and running, the next critical step is deploying agents to your endpoints. This is where Wazuh transforms from a theoretical security tool into a practical monitoring solution. After managing agent deployments across hund...
