Wazuh
Grafana
Our great sponsors
Wazuh | Grafana | |
---|---|---|
151 | 376 | |
8,876 | 59,887 | |
7.5% | 1.5% | |
10.0 | 10.0 | |
about 19 hours ago | 5 days ago | |
C | TypeScript | |
GNU General Public License v3.0 or later | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Wazuh
-
Update vulnerability databases through proxy with authentication
By now I've set up the offline updates part and ran straight into https://github.com/wazuh/wazuh/issues/20573 when I also tried to enable the Ubuntu checks. FML.
I've found https://github.com/wazuh/wazuh/issues/1112 which suggested to basically include the "http_proxy" and "https_proxy" environment variable definitions in "/lib/systemd/system/wazuh-manager.service" (updated path compared to the github issue).
Seems like something that should be documented somewhere more official than a random reddit post for sure. Added it to https://github.com/wazuh/wazuh/issues/1112 for good measure.
-
Risks of hosting a website out of my house
Monitoring & Active Measures - Exporting firewall events to an external time-series database like I describe above is good to see who is touching your firewall or accessing your web site. Using an Intrusion Detection System / Intrusion Prevention System (IDS/IPS) such as open-source Suricata, which is a free package on pfSense, and deploying file system integrity monitoring, such as the open-source Wazuh on the exposed server are also good approaches to protecting yourself.
-
DevOps and Security: DevSecOps
Wazuh: An open source security monitoring platform that integrates with popular tools like Elasticsearch and Kibana to provide comprehensive security event analysis and response capabilities.
-
Another windows 11 thread....
If you can provide us with the following information, we will be able to better assess the problem and confirm that these warnings are caused by issue #15160:
I'm concerned you aren't fully aware of this widely discussed issue; https://github.com/wazuh/wazuh/issues/15160
-
Vulnerability overview
On another note, as mentioned in my response to the question of this post, we are working on a complete rework of the Vulnerability Detection engine. This rework will provide a sanitized CVEs feed from wazuh.com and a completely new scanner engine. It will also include a new UI for global queries.
-
Alternative to Endpoint Protector?
Maybe you can take a look at wazuh? https://wazuh.com/
Grafana
-
4 facets of API monitoring you should implement
Prometheus: Open-source monitoring system. Often used together with Grafana.
-
The Mechanics of Silicon Valley Pump and Dump Schemes
Grafana
-
Reverse engineering the Grafana API to get the data from a dashboard
Yes I'm aware that Grafana is open source but the method I used to find the API endpoints is far quicker than digging through hundreds of files in a codebase I'm not familiar with.
-
Building an Observability Stack with Docker
So, you will add one last container to allow us to visualize this data: Grafana, an open-source analytics and visualization platform that allows us to see traces and metrics simply. You can set Grafana to read data from both Tempo and Prometheus by setting them as datastores with the following grafana.datasource.yaml config file:
-
How to collect metrics from node.js applications in PM2 with exporting to Prometheus
In example above, we use 2 additional parameters: code (HTTP response code) and page (page identifier), which provide detailed statistics. For example, you can build such graphs in Grafana:
-
Root Cause Chronicles: Quivering Queue
Robin switched to the Grafana dashboard tab, and sure enough, the 5xx volume on web service was rising. It had not hit the critical alert thresholds yet, but customers had already started noticing.
-
Teach Yourself Programming in Ten Years (1998)
I completely agree but do feel it needs qualifying. The problems beginners run into aren't usually the same as the problems experienced devs run into when adopting a language new to them, but where I see the two overlap I know something is a serious hazard in a language.
Java as a first language: won't like the boilerplate but won't have any point of comparison anyway, will get a few NPEs, might use threads and get data races but won't experience memory unsafety.
Go as a first language: much less boilerplate, but will still get nil panics, will be encouraged to use goroutines because every tutorial shows off how "easy" they are, will get data races with full blown memory unsafety immediately.
Rust as a first language: `None` // no examples found
I think Go as a beginner language would be better if people were discouraged from using goroutines instead of actively encouraged (the myth of "CSP solves everything"), otherwise I think it needs much better tooling to save people from walking off a cliff with their goroutines. And no, -race clearly isn't it, especially not for a beginner.
And in one respect I've found Go more of a hazard for experienced devs than beginners: the function signature of append() gives you the intuition of a functional programming append that never modifies the original slice. This has literally resulted in CVEs[1] even by experienced devs, especially combined with goroutines. Beginners won't have an intuition for this and will hopefully check the documentation instead of assuming.
[1] https://github.com/grafana/grafana/security/advisories/GHSA-...
-
Start your server remotely
I build the Tasmota firmware for the S31's nightly, and expose the Prometheus endpoint so I can also monitor the current used by these devices in real time with the data pushed to Grafana. I have ~30 of them in my home/homelab, and servers, appliances, sump pump, fans, etc. are all monitored by my S31 fleet.
-
List of your reverse proxied services
Grafana - for dashboards and log monitoring
-
PM2 module to monitoring node.js application with export to Prometheus and Grafana
In most cases, applications use the combination of Prometheus + Grafana, which allows collect data and display it in the form of graphs and also to set up alerts for changes in any metrics.
What are some alternatives?
Thingsboard - Open-source IoT Platform - Device management, data collection, processing and visualization.
security-onion - Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
OSSEC - OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
Suricata - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
openvas-scanner - This repository contains the scanner component for Greenbone Community Edition.
Apache Superset - Apache Superset is a Data Visualization and Data Exploration Platform [Moved to: https://github.com/apache/superset]
Snort - Snort++
Heimdall - An Application dashboard and launcher
crowdsec - CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.
OSQuery - SQL powered operating system instrumentation, monitoring, and analytics.
Thingspeak - ThingSpeak is an open source “Internet of Things” application and API to store and retrieve data from things using HTTP over the Internet or via a Local Area Network. With ThingSpeak, you can create sensor logging applications, location tracking applications, and a social network of things with status updates.
velociraptor - Digging Deeper....