🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM
☆133Jul 21, 2026Updated last week
Alternatives and similar repositories for awesome-wazuh
Users that are interested in awesome-wazuh are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rules and decoders for Wazuh to process the syslog from Sophos firewalls☆23Jan 24, 2026Updated 6 months ago
- Send wazuh alert to telegram by telegram bot.☆15Nov 26, 2022Updated 3 years ago
- Sigma to Wazuh rule converter☆23Apr 28, 2026Updated 3 months ago
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,362Mar 11, 2026Updated 4 months ago
- AI-powered multi-tenant SOC automation agent using LangGraph with Wazuh, Cortex, TheHive & MISP integration☆71Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Open source HIDS tailored for Microsoft Windows and Active Directory☆31Updated this week
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆60Feb 18, 2026Updated 5 months ago
- Personal scripts☆15Sep 11, 2024Updated last year
- This repository contains a fine-tuned Sysmon configuration file designed to enhance security monitoring and log collection for Wazuh SIEM…☆17Mar 22, 2025Updated last year
- A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based be…☆261Jul 22, 2026Updated last week
- A locally hosted page for cheat sheets. Currently being used for reverse engineering and hosted in labs so I can limit or forgo (lock dow…☆15Mar 19, 2026Updated 4 months ago
- ☆32Jun 6, 2026Updated last month
- Decoders and Rules for Fortigate in Wazuh☆75Mar 26, 2024Updated 2 years ago
- Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSens…☆257Dec 31, 2025Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆21Jan 20, 2023Updated 3 years ago
- NavSec is the most comprehensive passive web vulnerability and privacy scanner. It performs real-time security analysis directly in your …☆23Sep 13, 2025Updated 10 months ago
- Vigil - an ever improving 100% OpenSource AI system for security☆222Updated this week
- MCP Server for Wazuh SIEM☆228Dec 12, 2025Updated 7 months ago
- Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag a…☆210Feb 26, 2026Updated 5 months ago
- Modular OSINT and attack surface analysis platform for authorized security research, with risk scoring, attack paths, and report generati…☆24Jun 4, 2026Updated last month
- ☆18Feb 23, 2026Updated 5 months ago
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆33Sep 26, 2024Updated last year
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆70Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Active Defense and HIDS/HIPS/WAAP Out-of-Band Orchestration for Critical Linux Infrastructure☆312Updated this week
- A Windows-native control plane for Microsoft Intune & Entra device management. Rust + WinUI 3 client over a .NET Graph sidecar, with a se…☆36Jul 21, 2026Updated last week
- AI-powered security operations for Wazuh SIEM—use any MCP-compatible client to ask security questions in plain English. Faster threat det…☆209Jun 26, 2026Updated last month
- From Chaos to Clarity. Turning Raw Windows Logs into Executive Insights. Looking for Indicators of Compromise.☆48Oct 20, 2025Updated 9 months ago
- Comprehensive Sysmon configuration file (sysmon_config.xml) specifically designed for integration with Wazuh SIEM. The configuration is o…☆22Aug 7, 2025Updated 11 months ago
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆58Mar 22, 2026Updated 4 months ago
- Security Monitoring using Wazuh, published by Packt☆43Apr 22, 2026Updated 3 months ago
- Active Directory Cheat Sheet☆207May 7, 2021Updated 5 years ago
- Troubleshooting MDE Workstations☆44Jul 2, 2026Updated 3 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Open-source collaborative note-taking platform for cybersecurity and CTI teams. IOC auto-extraction, STIX 2.1 export, real-time ed…☆23Apr 6, 2026Updated 3 months ago
- Python scripts to convert PfSense and OPNSense firewall rules into a graphical view of the flows.☆433Mar 10, 2026Updated 4 months ago
- 🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit☆81Apr 16, 2026Updated 3 months ago
- Adversary tradecraft detection, protection, and hunting☆15May 8, 2026Updated 2 months ago
- ☆14Aug 26, 2023Updated 2 years ago
- A harmless Netcat-lookalike for detection testing. Simulates NC-style command-line flags and listener behavior without exposing a real ba…☆37Nov 27, 2025Updated 8 months ago
- PowerShell SharePoint extraction + auditing tool for red/blue/purple teams. Enumerates all SharePoint sites/drives a user can access via …☆167Jan 25, 2026Updated 6 months ago