How To Ship Linux Intrusion Detection Logs To Security Onion Using The Wazuh Agent

We will enable wazuh manager in security onion, install a wazuh agent on a linux host, configure it to ship logs to security onion ids and verify that we are monitoring the linux host.

Resources
Watch the linux logs in our attack and detect lab: How To Exploit & Detect Sudo Misconfi...
How to enable wazuh manager: https://noctedefensor.com/security-on...
How to Install wazuh agent: https://documentation.wazuh.com/3.13/...
How to configure wazuh agent: https://documentation.wazuh.com/3.13/...

Like and SUBSCRIBE for more Connect and Direct Message me on Linkedin: LinkedIn: howard-mukanda-24503144

• #howto_style
• #cyber_security
• #intrusion_detection
• #security_information_and_event_management
• #security_onion
• #cyber_defense
• #open_source
• #open_source_software
• #free_siem
• #host_based_intrusion_detection_system
• #free_malware_removal
• #security_onion_tutorial
• #threat_hunting
• #cyber_security_training_for_beginners
• #cyber_security_penetration_testing
• #cyber_security_course
• #cyber_security_career
• #cyber_security_analyst