How do rules and alerts trigger

This page summarizes the projects mentioned and recommended in the original post on /r/Wazuh
Security Wazuh Ossec Loganalyzer Compliance

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured

  • Wazuh

    Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

    • Hi u/BlizzardOW, I think I am not really understanding what you have done to 'activate' the Windows Defender Alerts, could you please explain?. Every rule in the ruleset, including rules 0430 and 0600, is supposed to be active by default, but that doesn't mean the alerts appear. Rules are applied to events, and those are created from, among other things, the logs specified to monitor using localfile blocks in agent file ossec.conf. To create alerts based on Windows Defender, the localfile block you should use is:

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Help: Dashboard installation failing with "can't read etc/opensearch_dashboards.yml no such file or directory"

    1 project | /r/Wazuh | 6 Dec 2023

  • Is there a work around for the Wazuh-agent installer issue with Debian 12?

    1 project | /r/Wazuh | 6 Jul 2023

  • Wazuh installation assistant - Indexer installation

    1 project | /r/Wazuh | 21 Mar 2023

  • "INFO: Could not connect to API id [default]: 3099 - ERROR3099 - Invalid credentials" after fresh install

    2 projects | /r/Wazuh | 7 Mar 2023

  • Custom dashboard with custom visualization to completely replace wazuh dashboard?

    2 projects | /r/Wazuh | 7 Feb 2023