Our collection of Wazuh detection rules for our Offense Lab
☆20Feb 13, 2022Updated 4 years ago
Alternatives and similar repositories for wazuh-detection-rules
Users that are interested in wazuh-detection-rules are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Active Response plugin. Osquery to execute wazuh/ossec active response plugins. You can write your own plugins, easy to plug☆12Jun 20, 2020Updated 6 years ago
- ☆17Oct 28, 2021Updated 4 years ago
- Zabbix Templates and scripts to monitor OSSEC or Wazuh Manager Intrusion Detection☆16Sep 18, 2025Updated 11 months ago
- ☆24Mar 1, 2022Updated 4 years ago
- Useful scripts for those administering Wazuh☆98Jan 6, 2026Updated 8 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Tools to integrate 2 great security tools OPNsense and Wazuh☆34Aug 26, 2021Updated 5 years ago
- Personal scripts☆15Sep 11, 2024Updated last year
- Sysmon and wazuh integration with Sigma sysmon rules [updated]☆73Jul 21, 2021Updated 5 years ago
- Scripts to automatically import threat intel into QRadar☆14Jun 20, 2019Updated 7 years ago
- ☆21Oct 17, 2021Updated 4 years ago
- Wazuh integration TheHive☆43Feb 21, 2023Updated 3 years ago
- Sigma to Wazuh rule converter☆23Apr 28, 2026Updated 4 months ago
- A configuration to allow Wazuh to communicate with ChatGPT, based on https://loggar.hashnode.dev/augmenting-wazuh-with-chatgpt-integratio…☆25Mar 20, 2023Updated 3 years ago
- setup wazuh to serve multiple organizations on a single instance.☆12Dec 29, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Wazuh prometheus exporter☆35Jul 4, 2025Updated last year
- Configurations to implement Wazuh☆13Nov 28, 2022Updated 3 years ago
- Convert Sigma rules to Wazuh rules☆77Sep 13, 2025Updated 11 months ago
- A Sigma to Wazuh / OSSEC converter including a generated Windows Sysmon ruleset☆42Jun 8, 2020Updated 6 years ago
- Time limited, auto-expiring group memberships for users on Google Cloud☆15Mar 29, 2022Updated 4 years ago
- Django middleware and signals for handling security events☆14Apr 14, 2021Updated 5 years ago
- ☆15Oct 6, 2022Updated 3 years ago
- 一个代理扫描平台☆53Feb 1, 2021Updated 5 years ago
- FWRF is a open source tool for firmware web-side analysis.☆11Aug 27, 2015Updated 11 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A ready-to-use WSL distribution that makes network labbing on Windows a breeze☆40Aug 22, 2026Updated 2 weeks ago
- 基于inotify的Linux文件实时监控程序，同时调用河马扫描来检测文件☆22Sep 4, 2020Updated 6 years ago
- ☆16Updated this week
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,390Mar 11, 2026Updated 5 months ago
- NIST based open source security automation delivered as AWS cloudformation☆20Jan 8, 2020Updated 6 years ago
- Python BlueSky client☆10Aug 4, 2023Updated 3 years ago
- ☆21Jan 20, 2023Updated 3 years ago
- A malicious .cab creation tool for CVE-2021-40444☆11Sep 12, 2021Updated 4 years ago
- Ansible role for security standards compliance☆13Mar 6, 2019Updated 7 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Dominate the Active Directory game. An Active Directory environments pentest tool complementary to existing ones like NetExec.☆21Aug 29, 2026Updated last week
- Downloading Splunk, made easy through scripts☆30Aug 31, 2026Updated last week
- Scrapy spider to recursively crawl for TOR hidden services☆11Oct 12, 2017Updated 8 years ago
- Shell script to download apps from Splunkbase☆24May 19, 2020Updated 6 years ago
- Documentation sources for syslog-ng Open Source Edition (https://github.com/syslog-ng/syslog-ng)☆12May 6, 2024Updated 2 years ago
- Knowledge Base 慢雾安全团队知识库☆29Oct 22, 2019Updated 6 years ago
- An Ansible playbook to setup my Ubuntu system☆11Apr 22, 2016Updated 10 years ago