MCP Server for Wazuh SIEM
INVENTORY é um painel web que exibe dados extraídos da API do Wazuh, via SysCollector. A solução oferece acesso rápido a detalhes do sistema. Tudo é apresentado em uma interface simples para equipes de TI. Utiliza os agentes do próprio Wazuh, eliminando a necessidade de instalar softwares adicionais reduzindo a superfície de ataque.
(Unofficial) Wazuh integration to send alerts to IRIS.
Comprehensive Sysmon configuration file (sysmon_config.xml) specifically designed for integration with Wazuh SIEM. The configuration is optimized to detect and monitor security-relevant events based on MITRE ATT&CK framework techniques.
Wazuh decoders and detection rules for MikroTik RouterOS syslog output. Covers firewall drops, DHCP leases, system events, login failures, and brute force detection. Tested on RouterOS 7.x and Wazuh 4.12–4.14.
Wazuh is a robust open-source security platform, but it doesn't include native support for Telegram alerts. This guide walks you through a simple method to send alerts, like SSH login attempts, to Telegram using a custom integration script.
Wazuh is a powerful open-source security platform for threat detection and response. This guide walks you through creating a custom integration script to send Wazuh alerts directly to Slack channels.
Wazuh and Trivy integration to scan Docker image vulnerabilities.
A Wazuh SIEM XDR integration that aims to enrich Wazuh alerts using VirusTotal and AlienVault OTX
A forensic visualization tool for Wazuh that transforms Windows process creation logs (Event ID 4688) into interactive, draggable relationship graphs. Optimized for Threat Hunting and Incident Response.
An unofficial integration for integrating Bitwarden event logs into Wazuh.
In short, just give it access to your alerts.json, default rules, custom rules, archives.json, and magic happens.
Gotify integration for Wazuh. notifiations
This project simulates real-world PowerShell-based fileless attacks and Living-off-the-Land (LotL) techniques against a Windows 11 endpoint, then detects them using Agent forwarded to a Wazuh SIEM.
Wazuh vulnerability report maker
Sovereign AI SOC: local-first AI security operations with Wazuh, Suricata, correlation-first incidents, case management and human-in-the-loop AI.
☢️ Python script to send Wazuh alerts to Telegram by bot.
He redactado una guía técnica paso a paso explicando como configurar Wazuh SIEM y automatizar el envío de alertas por correo electrónico ante eventos específicos del sistema usando una integración en Python.
Production-grade, multi-container SOC Automation & ITSM Platform. Integrates Wazuh SIEM alert ingestion, SafeLine WAF defense, n8n SOAR workflows, multi-channel Slack notifications, Active Directory LDAPS authentication, and an RBAC incident ticketing dashboard (FastAPI + React).
To associate your repository with the wazuh-integration topic, visit your repo's landing page and select "manage topics."