Wazuh
lynis
Our great sponsors
Wazuh | lynis | |
---|---|---|
151 | 72 | |
8,876 | 12,386 | |
7.5% | 6.2% | |
10.0 | 8.1 | |
about 21 hours ago | 2 days ago | |
C | Shell | |
GNU General Public License v3.0 or later | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Wazuh
-
Update vulnerability databases through proxy with authentication
By now I've set up the offline updates part and ran straight into https://github.com/wazuh/wazuh/issues/20573 when I also tried to enable the Ubuntu checks. FML.
I've found https://github.com/wazuh/wazuh/issues/1112 which suggested to basically include the "http_proxy" and "https_proxy" environment variable definitions in "/lib/systemd/system/wazuh-manager.service" (updated path compared to the github issue).
Seems like something that should be documented somewhere more official than a random reddit post for sure. Added it to https://github.com/wazuh/wazuh/issues/1112 for good measure.
-
Risks of hosting a website out of my house
Monitoring & Active Measures - Exporting firewall events to an external time-series database like I describe above is good to see who is touching your firewall or accessing your web site. Using an Intrusion Detection System / Intrusion Prevention System (IDS/IPS) such as open-source Suricata, which is a free package on pfSense, and deploying file system integrity monitoring, such as the open-source Wazuh on the exposed server are also good approaches to protecting yourself.
-
DevOps and Security: DevSecOps
Wazuh: An open source security monitoring platform that integrates with popular tools like Elasticsearch and Kibana to provide comprehensive security event analysis and response capabilities.
-
Another windows 11 thread....
If you can provide us with the following information, we will be able to better assess the problem and confirm that these warnings are caused by issue #15160:
I'm concerned you aren't fully aware of this widely discussed issue; https://github.com/wazuh/wazuh/issues/15160
-
Vulnerability overview
On another note, as mentioned in my response to the question of this post, we are working on a complete rework of the Vulnerability Detection engine. This rework will provide a sanitized CVEs feed from wazuh.com and a completely new scanner engine. It will also include a new UI for global queries.
-
Alternative to Endpoint Protector?
Maybe you can take a look at wazuh? https://wazuh.com/
lynis
-
Who does check linux distros of malware - open source
Linux has (free) tools to improve security and detect/remove malware: Lynis,Chkrootkit,Rkhunter,ClamAV,Vuls,LMD,radare2,Yara,ntopng,maltrail,Snort,Suricata...
- Learn security best practices
-
Fight against scans, bots and script-kiddies
What I would do in your place is run this https://github.com/CISOfy/lynis and follow some of the instructions.
-
What are your favorite sites that are privacy related that you bookmarked?
https://github.com/CISOfy/Lynis (Linux hardening)
- Ultimate privacy when setting up Fedora?
- Vulnerability scanning tools for homelab?
-
Cyber Security for developers: what and where to learn?
Linux security audit scanner
-
Any tool to check the security of my server?
Maybe try lynis
-
Lynis – Scan your system (Resource my cisco notes)
Project page : https://cisofy.com/lynis/
Source code : https://github.com/CISOfy/lynis
What are some alternatives?
security-onion - Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management
OSSEC - OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
Suricata - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
openvas-scanner - This repository contains the scanner component for Greenbone Community Edition.
Snort - Snort++
crowdsec - CrowdSec - the open-source and participative security solution offering crowdsourced protection against malicious IPs and access to the most advanced real-world CTI.
OSQuery - SQL powered operating system instrumentation, monitoring, and analytics.
Grafana - The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.
velociraptor - Digging Deeper....
Fleet - Open-source platform for IT, security, and infrastructure teams. (Linux, macOS, Chrome, Windows, cloud, data center)
pfSense - Main repository for pfSense
sigma - Main Sigma Rule Repository