AASLR: Active Response With Wazuh and OSSEC | Richard Fifarek

Join us in the Black Hills InfoSec Discord server here: Discord: discord to keep the security conversation going!

Reach out to Black Hills Infosec if you need pentesting, threat hunting, ACTIVE SOC, incident response, or blue team services -- https://www.blackhillsinfosec.com/

00:00 - Intro/Pre-Show Banter
01:42 - Installing Wazuh and its components  
08:24 - Starting Wazuh
11:03 - Security Events dashboard
15:56 - Deploying Wazuh to an agent
23:18 - Active Response with Wazuh
26:17 - Triggering Alerts and responding to them
36:00 - Q&A

Description: Richard Fifarek joins us to demo Wazuh, an open source security platform, and how it can be an effective tool for active response.

Black Hills Infosec Socials
Twitter: Twitter: BHinfoSecurity
Mastodon: https://infosec.exchange/@blackhillsi...
LinkedIn: LinkedIn: antisyphon-training
Discord: Discord: discord

Black Hills Infosec Shirts & Hoodies
https://spearphish-general-store.mysh...

Black Hills Infosec Services
Active SOC: https://www.blackhillsinfosec.com/ser...
Penetration Testing: https://www.blackhillsinfosec.com/ser...
Incident Response: https://www.blackhillsinfosec.com/ser...

Backdoors & Breaches - Incident Response Card Game
Backdoors & Breaches: https://www.backdoorsandbreaches.com/
Play B&B Online: https://play.backdoorsandbreaches.com/

Antisyphon Training
Pay What You Can: https://www.antisyphontraining.com/pa...
Live Training: https://www.antisyphontraining.com/co...
On Demand Training: https://www.antisyphontraining.com/on...

Educational Infosec Content
Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/
Wild West Hackin' Fest YouTube: wildwesthackinfest
Active Countermeasures YouTube: activecountermeasures
Antisyphon Training YouTube: antisyphontraining

Join us at the annual information security conference in Deadwood, SD (in-person and virtually) — Wild West Hackin' Fest: https://wildwesthackinfest.com/

#bhis #infosec