7MS #582: Using Wazuh as a SIEM for Work and Home
7 Minute Security31 Heinä 2023

7MS #582: Using Wazuh as a SIEM for Work and Home

Today we had a blast playing with Wazuh as a SIEM you can use for work and/or home. Inspiration for this episode came from Network Chuck.

This one-liner will literally get Wazuh installed in about 5 minutes:

curl -sO https://packages.wazuh.com/4.4/wazuh-install.sh && sudo bash ./wazuh-install.sh -a

P.S. if you accidentally close your command window before writing down the admin password (like I did), you can use this command to retrieve it:

sudo tar -O -xvf wazuh-install-files.tar wazuh-install-files/wazuh-passwords.txt

Once Wazuh is installed, I recommend going to Management > Configuration > Edit Configuration, look for a section that starts with and change to .

Also, before you start deploying agents, I recommend making some groups for them, which I believe has to be done at the command line:

/var/ossec/bin/agent_groups -a -g windows-boxes -q /var/ossec/bin/agent_groups -a -g linux -q

From there you should be ready to start rockin' some agent installs. Have fun!

Jaksot(695)

7MS #190: Infosec News and Links Roundup

7MS #190: Infosec News and Links Roundup

Show notes: https://7ms.us/7ms-190-infosec-news-and-links-roundup/

13 Touko 201615min

7MS #189: OFFTOPIC - Reviews of The Family Fang and Tumbledown

7MS #189: OFFTOPIC - Reviews of The Family Fang and Tumbledown

Show notes: https://7ms.us/7ms-189-offtopic-reviews-of-the-family-fang-and-tumbledown/

11 Touko 20167min

7MS #188: Vulnhub Walkthrough - DroopyCTF

7MS #188: Vulnhub Walkthrough - DroopyCTF

Show notes: https://7ms.us/7ms-188-vulnhub-walkthrough-droopyctf/

9 Touko 201611min

7MS #187: Infosec News and Links Roundup

7MS #187: Infosec News and Links Roundup

Show notes: https://7ms.us/7ms-187-infosec-news-and-links-roundup/

6 Touko 201614min

7MS #186: OFFTOPIC - Reviews of Brooklyn and The Revenant

7MS #186: OFFTOPIC - Reviews of Brooklyn and The Revenant

Show notes: https://7ms.us/7ms-186-offtopic-reviews-of-brooklyn-and-the-revenant/

5 Touko 20169min

7MS #185: Vulnhub Walkthrough - Lord of the Root

7MS #185: Vulnhub Walkthrough - Lord of the Root

Show notes here: https://7ms.us/7ms-185-vulnhub-walkthrough-lord-of-the-root/

3 Touko 20167min

7MS #184: Infosec News and Links Roundup

7MS #184: Infosec News and Links Roundup

Show notes here: https://7ms.us/7ms-184-infosec-news-and-links-roundup/

29 Huhti 201616min

7MS #183: OFFTOPIC-The Invitation

7MS #183: OFFTOPIC-The Invitation

Show notes here: https://7ms.us/7ms-183-offtopic-the-invitation/

28 Huhti 20168min

Suosittua kategoriassa Politiikka ja uutiset

aikalisa
rss-ootsa-kuullut-tasta
ootsa-kuullut-tasta-2
politiikan-puskaradio
rss-podme-livebox
rss-vaalirankkurit-podcast
otetaan-yhdet
the-ulkopolitist
et-sa-noin-voi-sanoo-esittaa
linda-maria
rss-kovin-paikka
rikosmyytit
mita-koulussa-ei-opetettu
rss-hyvaa-huomenta-bryssel
popcorn-with-esko
rss-kaikki-uusiksi
rss-merja-mahkan-rahat
rss-50100-podcast
rss-tyolinjalla-pekka-sauri
rss-raha-talous-ja-politiikka