wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Wazuh - Docker containers

Wazuh - Ruleset

Plugins for Wazuh Dashboard

Wazuh - Ansible playbook

Active Defense and HIDS/HIPS/WAAP Out-of-Band Orchestration for Critical Linux Infrastructure

Wazuh - Project documentation

MCP Server for Wazuh SIEM

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001) and active response. Connect Claude or any LLM to your SOC. OAuth 2.1, RBAC, multi-cluster, air-gap ready.

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

Wazuh - Tools for packages creation

SIAC is an enterprise SIEM built on open-source technology.

A Ruleset to enhance detection capabilities of Ossec using Sysmon

WAZUH - The Open Source Security Platform Installation

Wazuh - RESTful API

Decoders and Rules for Fortigate in Wazuh

Monitoring a Kubernetes cluster involves deploying and utilizing the Wazuh agent within the Kubernetes environment.

Sysmon and wazuh integration with Sigma sysmon rules [updated]

Wazuh - Puppet module

Wazuh - Splunk App