Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Wazuh - Docker containers

Wazuh - Ruleset

Plugins for Wazuh Dashboard

Wazuh - Ansible playbook

Wazuh - Project documentation

🐧 SysWarden is an ultra-lightweight Host-based Security Orchestrator for Linux.

MCP Server for Wazuh SIEM

AI-powered security operations for Wazuh SIEM—use any MCP-compatible client to ask security questions in plain English. Faster threat detection, incident triage, and compliance checks with real-time monitoring and anomaly spotting. Production-ready MCP server for conversational SOC workflows.

SOAR Automation with Shuffle, Wazuh & TheHive | This project integrates Shuffle SOAR, Wazuh SIEM, and TheHive to automate security incident response. It enriches alerts using VirusTotal & AbuseIPDB, creates incidents in TheHive, and sends real-time Discord notifications.

SIAC is an enterprise SIEM built on open-source technology.

Wazuh - Tools for packages creation

A Ruleset to enhance detection capabilities of Ossec using Sysmon

WAZUH - The Open Source Security Platform Installation

Wazuh - RESTful API

Monitoring a Kubernetes cluster involves deploying and utilizing the Wazuh agent within the Kubernetes environment.

Sysmon and wazuh integration with Sigma sysmon rules [updated]

Decoders and Rules for Fortigate in Wazuh

Wazuh - Splunk App

Wazuh - Puppet module