DEV Community

#wazuh

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Wazuh snort decoder cuts the last octet off srcip and dstip (4.14.x)

Wazuh snort decoder cuts the last octet off srcip and dstip (4.14.x)

Comments
3 min read
Wazuh active response: Cannot read 'srcip' from data

Wazuh active response: Cannot read 'srcip' from data

Comments
5 min read
Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Comments
4 min read
Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Comments
4 min read
Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Comments
5 min read
SOC Case Study: WinRM & PowerShell Attack Triage & Log Correlation

SOC Case Study: WinRM & PowerShell Attack Triage & Log Correlation

Comments 1
2 min read
Wazuh SIEM: Deploy Open Source Threat Detection

Wazuh SIEM: Deploy Open Source Threat Detection

Comments
3 min read
OpenAI Beelzebub Linux Simulation with Custom Wazuh Detection Rules

OpenAI Beelzebub Linux Simulation with Custom Wazuh Detection Rules

Comments
8 min read
Patching Wazuh Manager for CVE-2026-74041: a short operational playbook

Patching Wazuh Manager for CVE-2026-74041: a short operational playbook

Comments
3 min read
CVE-2026-74041 and the integrity of your security telemetry

CVE-2026-74041 and the integrity of your security telemetry

Comments
3 min read
Upgrading past CVE-2026-74041: change control for a critical Wazuh Manager fix

Upgrading past CVE-2026-74041: change control for a critical Wazuh Manager fix

Comments
2 min read
CVE-2026-74041 shows why two parsers on one config file is a security problem

CVE-2026-74041 shows why two parsers on one config file is a security problem

Comments
3 min read
Detecting abuse of CVE-2026-74041 in Wazuh Manager with the logs you already keep

Detecting abuse of CVE-2026-74041 in Wazuh Manager with the logs you already keep

Comments
3 min read
CVE-2026-74041 for defenders: what a config validation bypass teaches about control placement

CVE-2026-74041 for defenders: what a config validation bypass teaches about control placement

Comments
2 min read
CVE-2026-74041: where Wazuh Manager configuration becomes code

CVE-2026-74041: where Wazuh Manager configuration becomes code

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.