/ Ambassadors
Cybersecurity Homelab – Deploying Wazuh Agents on macOS, Linux & Windows
Let's deploy Wazuh agents on all the endpoints in my house!
Self-Healing Infrastructure Security
July 24th 2026 / Ambassadors
Autonomous Detection, Response & Recovery on AWS using Wazuh and a SOAR Orchestrator
Migrating to Native Sysmon on Windows 11 24H2+ and Windows Server 2025 with Wazuh
July 21st 2026 / Ambassadors
Full technical report attached and GitHub repository
Developed an AI security layer integrated with Wazuh to detect prompt injection attacks, enrich alerts, and support automated response workflows
July 21st 2026 / Ambassadors
This is an experiment in giving Wazuh alerts an AI-driven triage and response layer.
Nugget #12. Populating Agent.Groups in Wazuh 4.x
July 20th 2026 / Ambassadors
Establishing dynamic generation of agent.groups.
Integrating Wazuh with Keycloak: Configuring User Roles and Role Mapping
July 20th 2026 / Ambassadors
In this part, we’ll fix exactly that and make sure Keycloak users get full administrator access inside Wazuh.
Urlscan.io Integration with Wazuh SIEM for Automated URL Reputation Enrichment
July 20th 2026 / Ambassadors
Automating URL reputation lookups and turning urlscan.io verdicts into severity-based Wazuh alerts.
Wazuh Vulnerability-Detection and Removal of Obsolete Kernel CVEs in a Controlled Manner
July 18th 2026 / Ambassadors
The article explains that Wazuh flags CVEs for old, unused kernel packages left installed on RHEL-family systems (like Rocky Linux) due to the installonly_limit setting, and shows how to safely identify and remove those outdated kernels with dnf repoquery/dnf remove (verified with –assumeno first) so the Vulnerability-Detection inventory resolves the stale findings.