Sysmon and wazuh integration with Sigma sysmon rules [updated]

Making Wazuh Deployment Easy

Integration scripts for Wazuh

An alternative to "wazuh-docker" with CI/CD-built images for amd64 and arm64, published on Docker Hub.

This script is for demo purposes only. It deploys a bare minimum, single-node Docker host and Wazuh stack running as a docker-compose stack.

☢️ Python script to send Wazuh alerts to Telegram by bot.

Setting Up Wazuh SIEM/XDR Homelab and Integration of Microsoft Defender into it.

Akamai integration for Wazuh that fetches events using the SIEM API

Docker image and Helm chart for Wazuh Manager and Filebeat, configurable for sending alerts to a specific OpenSearch instance 🐺

Install wazuh-manager and ELK cluster in Amazon Opsoworks

Implementing a comprehensive and scalable security monitoring solution for Windows endpoint.

🛡️ Enhance network security with advanced Wazuh detection rules, designed for open-source collaboration and robust monitoring of threats.

On progress

Automated Wazuh SIEM Installation & Configuration

SOC Home Lab with Ubuntu (host), Wazuh SIEM, Windows endpoint (victim) with Sysmon, and Kali Linux (attacker). Simulates real-world attacks for aspiring SOC analysts. Practice threat detection, log analysis, and incident response using Wazuh and Sysmon in a controlled environment.

Docker Container Setup with Wazuh for Vulnerability Scanning DVWA Container