Integrating Security tools

[Carl ocee]

How do I integrate Suricata, TheHive, and MISP on my Wazuh agent that's running on a Windows OS

[Alberto Marcelino Zárate]

Hello,

For TheHive you can follow the next guide from our official Blog:

-Using Wazuh and TheHive for threat protection and incident response

For Suricata integration these ones:

-Responding to network attacks with Suricata and Wazuh XDR
-Network IDS integration

For MISP you will need to use the Wazuh Integrator module to connect MISP via API:

-Third-party integration
-External API Integration

Let me share with you additional documentation that could help you to work on each workflow:

-Decoders
-Configuring syslog on the Wazuh server

Thanks!