DEV Community

#wazuh

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Splitting Wazuh 5.0 events per tenant silently turns off detection

Splitting Wazuh 5.0 events per tenant silently turns off detection

Comments
4 min read
A rule that loads fine and never fires: what we measured on our own Wazuh rig

A rule that loads fine and never fires: what we measured on our own Wazuh rig

Comments
5 min read
What tells you a Wazuh rule has gone quiet?

What tells you a Wazuh rule has gone quiet?

Comments
7 min read
Wazuh active response: Cannot read 'srcip' from data

Wazuh active response: Cannot read 'srcip' from data

Comments
5 min read
Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Comments
4 min read
Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Comments
4 min read
Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Comments
5 min read
SOC Case Study: WinRM & PowerShell Attack Triage & Log Correlation

SOC Case Study: WinRM & PowerShell Attack Triage & Log Correlation

Comments 1
2 min read
Wazuh SIEM: Deploy Open Source Threat Detection

Wazuh SIEM: Deploy Open Source Threat Detection

Comments
3 min read
OpenAI Beelzebub Linux Simulation with Custom Wazuh Detection Rules

OpenAI Beelzebub Linux Simulation with Custom Wazuh Detection Rules

Comments
8 min read
Patching Wazuh Manager for CVE-2026-74041: a short operational playbook

Patching Wazuh Manager for CVE-2026-74041: a short operational playbook

Comments
3 min read
CVE-2026-74041 and the integrity of your security telemetry

CVE-2026-74041 and the integrity of your security telemetry

Comments
3 min read
Upgrading past CVE-2026-74041: change control for a critical Wazuh Manager fix

Upgrading past CVE-2026-74041: change control for a critical Wazuh Manager fix

Comments
2 min read
CVE-2026-74041 shows why two parsers on one config file is a security problem

CVE-2026-74041 shows why two parsers on one config file is a security problem

Comments
3 min read
Detecting abuse of CVE-2026-74041 in Wazuh Manager with the logs you already keep

Detecting abuse of CVE-2026-74041 in Wazuh Manager with the logs you already keep

Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.