By Farouk Musa

In this blog post, we demonstrated how to detect the Cacti CVE-2022-46169 vulnerability and block exploitation attempts with Wazuh.

By Benjamin Nworah

Our new blog post shows how we successfully use Wazuh to detect Vidar infostealer on an infected Windows endpoint.

By Abdullah Al Noman

Our new blog post shows how Wazuh can help organizations to monitor USB drives plugged into monitored Windows endpoints in real-time

By Henadence Anyam

Our new blog post shows how to detect common Linux persistence techniques with Wazuh by covering several common techniques.

By Adedamola Okelola

In this blog post, we use Sysmon integration and the Wazuh security configuration assessment module to detect RedLine infostealer.

By Pacome Kemkeu

In our new blog post, we focus on adversary emulation on AWS with Stratus Red Team and using Wazuh security capabilities.

By Anthony Faruna

In this blog post, we continue showing how Wazuh can detect some common Active Directory attacks using Windows security logs.

By Ifeanyi Onyia Odike

The global pandemic in 2020 gave rise to more companies adopting remote working tools, services, and collaboration solutions. But organizations that utilize remote work services...

By Anthony Faruna

This blog shows how Wazuh can detect some common Active Directory attacks using Windows security logs and events captured on Sysmon.

By Openime Oniagbi and Dario Menten

Our new blog post shows how Wazuh can detect generic and obfuscated hoaxshell payloads and other attacks that abuse PowerShell.