DEV Community

#wazuh

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Wazuh: wazuh-analysisd segfault after a ruleset reload (4.13 and later)

Comments
4 min read
Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Wazuh custom rule never fires: shadowed by a sibling rule (and analysisd -t exits 0)

Comments
4 min read
Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Wazuh alert is in alerts.json but missing from the dashboard: mapper_parsing_exception

Comments
5 min read
SOC Case Study: WinRM & PowerShell Attack Triage & Log Correlation

SOC Case Study: WinRM & PowerShell Attack Triage & Log Correlation

Comments 1
2 min read
Wazuh SIEM: Deploy Open Source Threat Detection

Wazuh SIEM: Deploy Open Source Threat Detection

Comments
3 min read
OpenAI Beelzebub Linux Simulation with Custom Wazuh Detection Rules

OpenAI Beelzebub Linux Simulation with Custom Wazuh Detection Rules

Comments
8 min read
Patching Wazuh Manager for CVE-2026-74041: a short operational playbook

Patching Wazuh Manager for CVE-2026-74041: a short operational playbook

Comments
3 min read
CVE-2026-74041 and the integrity of your security telemetry

CVE-2026-74041 and the integrity of your security telemetry

Comments
3 min read
Upgrading past CVE-2026-74041: change control for a critical Wazuh Manager fix

Upgrading past CVE-2026-74041: change control for a critical Wazuh Manager fix

Comments
2 min read
Detecting abuse of CVE-2026-74041 in Wazuh Manager with the logs you already keep

Detecting abuse of CVE-2026-74041 in Wazuh Manager with the logs you already keep

Comments
3 min read
CVE-2026-74041 shows why two parsers on one config file is a security problem

CVE-2026-74041 shows why two parsers on one config file is a security problem

Comments
3 min read
CVE-2026-74041 for defenders: what a config validation bypass teaches about control placement

CVE-2026-74041 for defenders: what a config validation bypass teaches about control placement

Comments
2 min read
CVE-2026-74041: where Wazuh Manager configuration becomes code

CVE-2026-74041: where Wazuh Manager configuration becomes code

Comments
2 min read
Wazuh SIEM: Open Source Threat Detection Deployment

Wazuh SIEM: Open Source Threat Detection Deployment

Comments
3 min read
Wazuh FIM "not detecting" a changed file usually means it has not looked yet

Wazuh FIM "not detecting" a changed file usually means it has not looked yet

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.