Blog / Engineering / Monitoring GKE audit logs
..."producer": "k8s.io" }, "protoPayload": { "@type": "type.googleapis.com/google.cloud.audit.AuditLog", "authenticationInfo": { "principalEmail": "javier.castro@wazuh.com" }, "authorizationInfo": [{ "granted": true, "permission": "io.k8s.core.v1.pods.list", "resource": "core/v1/namespaces/default/pods" }], "methodName": "io.k8s.core.v1.pods.list", "requestMetadata": { "callerIp": "sanitized", "callerSuppliedUserAgent": "GoogleCloudConsole" },...
Blog / News / Wazuh workshop at Bsides Chicago – July 15th 2017
...and hardening guides Presenters: Santiago Bassett and Pedro Sanchez Santiago is the founder of Wazuh and is known for his contributions to OSSIM (Open Source Security Information Management) and OSSEC...
Blog / Engineering / File Integrity Monitoring and Wazuh RESTful API
The goal of this article is to explain how to set up a basic configuration of FIM (File Integrity Monitoring) using the syscheck component in OSSEC. After that, we will check...
Blog / Engineering / Automatically deploying OSSEC on Windows using Wazuh API
In some environments the hardest part of the deployment process is the installation of OSSEC on Windows endpoints. Wazuh has created a tool to install, register and connect Windows agents using...
Blog / News / Wazuh announces integration with Amazon Security Lake
...the continent. “The integration of Amazon Security Lake and Wazuh has transformed our log management, bolstering our threat management capabilities,” said Pedro Fangueiro, CISO at Jumia. “The solution enhances efficiency...
Blog / Engineering / Report Windows Firewall events through Event Channel
Windows Event Channel monitoring in OSSEC is the modern version of Event Log, and unlike this, Event Channel allows you to make queries in order to filter events. In this case...
Blog / Engineering / Get ready for GDPR
Lately, not only the tech and related communities, but also pretty much everyone else has heard of GDPR, the new standards for security compliance. GDPR (General Data Protection Regulation) has...
Blog / Engineering / Setting up Elasticsearch time-based indices
When you use Wazuh’s default configuration for the Elastic Stack (by following the installation guide) alerts are indexed in elasticsearch with the following naming convention: wazuh-alerts-3.x-YYYY.MM.dd This means you are...
Blog / Engineering / Monitor Office 365 with Wazuh
Note Update 7/4/2022: Wazuh 4.3 natively supports Office 365 with a more robust and complete integration. If you are working with Wazuh 4.3 or newer, go to the Using Wazuh...