MCP Server for Wazuh SIEM
INVENTORY é um painel web que exibe dados extraídos da API do Wazuh, via SysCollector. A solução oferece acesso rápido a detalhes do sistema. Tudo é apresentado em uma interface simples para equipes de TI. Utiliza os agentes do próprio Wazuh, eliminando a necessidade de instalar softwares adicionais reduzindo a superfície de ataque.
(Unofficial) Wazuh integration to send alerts to IRIS.
Comprehensive Sysmon configuration file (sysmon_config.xml) specifically designed for integration with Wazuh SIEM. The configuration is optimized to detect and monitor security-relevant events based on MITRE ATT&CK framework techniques.
MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.
Wazuh decoders and detection rules for MikroTik RouterOS syslog output. Covers firewall drops, DHCP leases, system events, login failures, and brute force detection. Tested on RouterOS 7.x and Wazuh 4.12–4.14.
Wazuh is a robust open-source security platform, but it doesn't include native support for Telegram alerts. This guide walks you through a simple method to send alerts, like SSH login attempts, to Telegram using a custom integration script.
Wazuh is a powerful open-source security platform for threat detection and response. This guide walks you through creating a custom integration script to send Wazuh alerts directly to Slack channels.
Wazuh and Trivy integration to scan Docker image vulnerabilities.
A Wazuh SIEM XDR integration that aims to enrich Wazuh alerts using VirusTotal and AlienVault OTX
A forensic visualization tool for Wazuh that transforms Windows process creation logs (Event ID 4688) into interactive, draggable relationship graphs. Optimized for Threat Hunting and Incident Response.
An unofficial integration for integrating Bitwarden event logs into Wazuh.
In short, just give it access to your alerts.json, default rules, custom rules, archives.json, and magic happens.
Gotify integration for Wazuh. notifiations
☢️ Python script to send Wazuh alerts to Telegram by bot.
This project simulates real-world PowerShell-based fileless attacks and Living-off-the-Land (LotL) techniques against a Windows 11 endpoint, then detects them using Agent forwarded to a Wazuh SIEM.
Wazuh vulnerability report maker
Setting Up Wazuh SIEM/XDR Homelab and Integration of Microsoft Defender into it.
Grafana dashboard for visualizing and monitoring security events from Wazuh SIEM and OPNsense Firewall.
To associate your repository with the wazuh-integration topic, visit your repo's landing page and select "manage topics."