Wazuh XDR Implementation

[Nithin Jose]

Hi Connections,

Please need your support to know how to implement XDR in the wazuh platform.

Best Regards,

Nithin Jose

[Agbeyemi Samuel Damilola]

Hello Nithin,

I will like to understand what you want. Are you saying you want to implement Wazuh, because Wazuh is actually a XDR.

I can send you a link on how to set up Wazuh component.

Your response will determine my next step of action.

Looking forward to your reply.

[Nithin Jose]

Hi, 

Please let me know how to add XDR features to wazuh, right now we are using wazuh as SIEM instance.

Best Regards,

Nithin Jose

[Agbeyemi Samuel Damilola]

Wazuh have always had both functionality of SIEM and XDR. It all depends on what functionality you are trying to explore.

This list summarizes some of them:

• Collection, correlation, and analysis of security events.
• File integrity monitoring (FIM) here is a link that give a better explanation of the implementation of FIM. https://documentation.wazuh.com/current/user-manual/capabilities/file-integrity/index.html?highlight=fim
• Malware and rootkits detection.  here is a link that give a better explanation of the implementation.  https://documentation.wazuh.com/current/user-manual/capabilities/anomalies-detection/index.html?highlight=malware%20rootkits%20detection
• Security configuration assessment (SCA).  here is a link that give a better explanation of the implementation.    https://documentation.wazuh.com/current/user-manual/capabilities/sec-config-assessment/index.html?highlight=security%20configuration%20assessment%20sca
• Agent-based vulnerability detection.
• Security monitoring for cloud-native applications, containers and Kubernetes.
• Threat detection for SaaS solutions and cloud providers.
• MITRE ATT&CK and regulatory compliance mapping.
• Automated responses to detected threats.

In the future, our team will continue to work on providing best-in-class threat prevention, detection, and response capabilities. And, of course, completely free and open source.

[someye8535 محمدی‎]

در تاریخ چهارشنبه ۳ اوت ۲۰۲۲،‏ ۱۸:۵۷ Agbeyemi Samuel Damilola <agbeyemi...@wazuh.com> نوشت:

--
You received this message because you are subscribed to the Google Groups "Wazuh mailing list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to wazuh+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/wazuh/d2e29156-f077-4643-ae74-dd4312649e0en%40googlegroups.com.