Wazuh Agent Install - World's Best OpenSource EDR Agent!

Подписаться 17 тыс.

Просмотров 20 тыс.

50% 1

Join me as we continue on to Phase 4 of the World's Best SIEM Stack Series, installing our Wazuh Agents onto our Linux and Windows endpoints.
Blog Post: / part-4-wazuh-agent-ins...
Contact Me: taylor.walton@socfortress.co
LinkedIn: / socfortressmdr
Twitter: / socfortress
Our Blog: / socfortress
Buy Me A Coffee: bit.ly/3woh21M
Our Blog: / socfortress
Security Operations Center as a Service: www.socfortress.co/
Free For Life Tier: www.socfortress.co/trial.html
Professional Services: www.socfortress.co/ps.html
Discord Channel: / discord
Series Playlist: • World's Best SIEM Stack

Наука

Опубликовано:

5 июл 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 16

@TheEternity17 Год назад

Great stuff, please keep going with this! Thanks for sharing your experience and knowledge.

@jig270 Год назад

your content is pure gold

@ppetrix Год назад

Can't wait for next video. Thank you.

@eliasantoniadis8556 Год назад

Thank you!

@miguelsaiz8151 Год назад

Great !

@ArmAikido 10 месяцев назад

Strange behavior - when I try to setup agent on Windows 2012R2 or higher I need to use Window7+ toolset instead of Windows Server 2008 to deploy the agent. A little bit not intuitive. And one question - why didn't consider to use sysmonconfig-with-filedelete.xml instead of sysmonconfig.xml ? Did you test it?

@reu4ik148 7 месяцев назад

Can someone suggest or show the full instructions for those who do not understand. I tried to connect the wazuh-agent over the NAT network, but eventually realized that I needed a bridge, but DHCP does not automatically give me network settings.

@naveedahmed1926 Год назад

What about wazuh and VT integration?

@1222dss Год назад

sysmon is indeed great tool for network connections tacking. What about sysmon for linux?

@taylorwalton_socfortress Год назад

Sysmon for linux is great when it works but ive found it to not be very stable on many Linux distros

@vadimkutia6516 Год назад

I think, that best sysmon config for SIEM is config from ionstorm

@waleedsaeed7521 Год назад

hello hi, can you integrate oracle database with wazuh? how to collect the logs of queries run in database in wazuh???

@waleedsaeed7521 Год назад

@Federico Pacher can you please please please make this tutorial video for monitoring oracle database in wazuh..?

Месяц назад

Anyone running Wazuh on an enterprise level?

@danward3928 9 месяцев назад

port 1514 arrrrghhh!!!

@zapphoddbubbahbrox5681 Год назад

great info! However, I would admonish the uninitiated to parse through all GitHub content AND ALL DEPENDENCIES prior to deployment to a production environment. It is not IF, it is WHEN will this pwn the most well intentioned amongst us. Blind cut/paste of anything also has and will hurt your feelings, eventually. And if you don't understand the code completely, return when you do.