Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Wazuh - Docker containers

Wazuh - Ruleset

Plugins for Wazuh Dashboard

Wazuh - Ansible playbook

Wazuh - Project documentation

MCP Server for Wazuh SIEM

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

AI-powered security operations for Wazuh SIEM—use any MCP-compatible client to ask security questions in plain English. Faster threat detection, incident triage, and compliance checks with real-time monitoring and anomaly spotting. Production-ready MCP server for conversational SOC workflows.

SIAC is an enterprise SIEM built on open-source technology.

Wazuh - Tools for packages creation

A Ruleset to enhance detection capabilities of Ossec using Sysmon

WAZUH - The Open Source Security Platform Installation

Wazuh - RESTful API

Monitoring a Kubernetes cluster involves deploying and utilizing the Wazuh agent within the Kubernetes environment.

Sysmon and wazuh integration with Sigma sysmon rules [updated]

Decoders and Rules for Fortigate in Wazuh

Wazuh - Splunk App

Wazuh - Puppet module

INVENTORY é um painel web que exibe dados extraídos da API do Wazuh, via SysCollector. A solução oferece acesso rápido a detalhes do sistema. Tudo é apresentado em uma interface simples para equipes de TI. Utiliza os agentes do próprio Wazuh, eliminando a necessidade de instalar softwares adicionais reduzindo a superfície de ataque.