Wazuh 101 - Part 1: Getting started with Wazuh, Open Source EDR, presented by Jesse Moore

Null:404 member Jesse Moore(aka dfir-jesseee) walks us through how to install the open source EDR platform Wazuh(formerly OSSEC).

[@slothking3756]

Keep up the good work!

[@reno.zed1]

Very interesting, I will give this a go at some point.

[@Gendie2000]

I am confused about the installation process for the agent. Can the agent be installed in different networks across multiple offices?

[@conm9891]

The agent is your endpoint device, like a pc, or a nas. The server can run on a vm.

[@fl2rms]

Hi, that should be possible especially if these sites are connected and running on different subnets. The agent simply reports back to the the Wazuh server.

[@petereriksson8915]

Oh this looks interesting..... - sudo nano msi-install... nope, not interesting.

[@talhafurkandemir2015]

Why ?