Learn how to deregister a Wazuh agent from the manager using the manage_agents utility. This step-by-step guide explains how to identify and remove an agent from the manager while clarifying the difference between deregistering an agent and uninstalling its software from the endpoint.
An executive perspective for CISOs, CIOs and risk leaders navigating digital transformation in emerging markets.
In this walkthrough, I connect an AWS EC2 Ubuntu instance to a Wazuh manager running locally on Kali Linux using Docker.
A practical scorecard for reviewing custom Wazuh detection rules before production deployment.
This article follows the hardening process from technical validation to staged corporate deployment. I use a controlled reference environment to demonstrate the behavior of the controls before they are considered for production. The environment is intentionally compact, but it represents the roles and trust boundaries found in a larger Windows estate: Active Directory, member servers, user endpoints, privileged administration, centralized policy, and security monitoring.
This guide walks through integrating BBOT, an open-source recursive internet scanner, with Wazuh XDR to provide continuous external attack surface monitoring. By the end, Wazuh will automatically discover and alert on subdomains, open ports, technologies, web endpoints, and vulnerabilities across your external-facing assets.
Turning IOC Feeds into Actionable SOC Detections.
How automated threat-intelligence ingestion helps SOC analysts detect malicious hashes, IP addresses, domains, URLs, and email indicators in near real time
Wazuh 4.14.7 is a cumulative maintenance release over 4.14.6. It contains 3 newfeature/enhancement items and 11 resolved issues. All facts in this section are taken directly from the official Wazuh release notes and the corresponding GitHub pull requests; every issue ID is
hyperlinked to its source.