Meet us at BSides San Francisco 2022
We are happy to announce that we will be sponsoring BSides San Francisco 2022, a two days event taking place on June 4th-5th this year. This is the third time...
All results for 'Francis Timilehin Jeremiah'
Showing 10 of 10 resultsMonitoring Docker container logs with Wazuh
Introduction By default, Docker container logs only show stdout and stderr standard streams, which are cleared when the container is destroyed. However, when non-interactive processes, like a database or web...
Detecting Sysjoker backdoor malware with Wazuh
Sysjoker is a backdoor malware that was first discovered in December 2021 by Intezer. It is sophisticated and written from scratch in C++. Sysjoker is a cross-platform malware that has...
Monitoring commonly abused Windows utilities
It is commonly known that malware abuses native Windows utilities to achieve the attacker’s nefarious goals. For example, a native utility like Vssadmin can be abused by ransomware to inhibit...
Using Wazuh to detect BPFDoor malware
BPFDoor is backdoor malware associated with the Chinese APT – Red Menshen. It is a highly evasive malware that targets Linux and Solaris-based systems. It is said to have been...
Integrating Wazuh with Shuffle
The Wazuh unified XDR and SIEM platform now has out-of-the-box integration with Shuffle SOAR. Shuffle is a general-purpose security automation platform. The Shuffle integration introduced in Wazuh version 4.4 extends...
Introducing Wazuh 4.7.0
We are thrilled to announce the release of Wazuh 4.7.0. This release introduces a native Maltiverse integration and improvements to the Syscollector and Vulnerability Detector modules, among other updates. Below,...
Detecting CUPS remote code execution vulnerability with Wazuh
CUPS (Common Unix Printing System) is a widely used printing system for Unix-like operating systems. It allows users to share printers over a network and provides a web-based interface for...
Auto-scalable Wazuh Cluster with Docker-Compose
To get started using Wazuh, take a look at Wazuh’s official Docker image. Docker Hub and Github can be used to quickly deploy a complete working environment with a Wazuh Manager, Wazuh API, Elasticsearch,...
Monitoring root actions on Linux using Auditd and Wazuh
The Linux Audit system takes care of keeping track of what is happening in the operating system by listening to events based on pre-configured rules. Nevertheless, Audit does not provide...
No results for 'Francis Timilehin Jeremiah'
Please make sure that all words are spelled correctly.