🛡️Awesome lists about all kinds of interesting topics of Wazuh XDR/SIEM
☆147Jul 21, 2026Updated 3 months ago
Alternatives and similar repositories for awesome-wazuh
Users that are interested in awesome-wazuh are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Rules and decoders for Wazuh to process the syslog from Sophos firewalls☆26Sep 16, 2026Updated last month
- Advanced Wazuh Rules for more accurate threat detection. Feel free to implement within your own Wazuh environment, contribute, or fork!☆1,427Mar 11, 2026Updated 7 months ago
- Trying to get Unifi Dream Machine Pro syslogs sent to Wazuh Manager node processed, i came up with these decoder and rule sets.☆18May 7, 2024Updated 2 years ago
- Sigma to Wazuh rule converter☆24Apr 28, 2026Updated 6 months ago
- Useful scripts for those administering Wazuh☆100Oct 28, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆17Oct 28, 2021Updated 5 years ago
- Wazuh - Installation assistant☆16Updated this week
- ☆22Jan 20, 2023Updated 3 years ago
- Personal scripts☆15Sep 11, 2024Updated 2 years ago
- An Obsidian-Based Second Brain for CyberSecurity Analysts and Professionals☆60Feb 18, 2026Updated 8 months ago
- A locally hosted page for cheat sheets. Currently being used for reverse engineering and hosted in labs so I can limit or forgo (lock dow…☆14Mar 19, 2026Updated 7 months ago
- ☆33Aug 22, 2026Updated 2 months ago
- In this projects are custom-decoders and custom-rules for Wazuh by me. Feel free to use it, you can redistribute it and/or modify it unde…☆68Mar 7, 2026Updated 8 months ago
- Script to test NetSec capabilities.☆21May 1, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A modular, skill-based autonomous Security Operations Center (SOC) agent that monitors OpenSearch/Elasticsearch data, builds RAG-based be…☆280Oct 19, 2026Updated 2 weeks ago
- AI-powered multi-tenant SOC automation agent using LangGraph with Wazuh, Cortex, TheHive & MISP integration☆90Updated this week
- Free interactive training materials in SCORM format☆203Sep 10, 2026Updated last month
- Automated Detection-as-Code (DaC) CI/CD pipeline for validating and programmatically deploying SIEM detection rules via GitHub Actions an…☆11Aug 31, 2026Updated 2 months ago
- Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PC…☆264Updated this week
- MCP Server for Wazuh SIEM☆240Dec 12, 2025Updated 10 months ago
- This tool is designed for systematic investigation and analysis of Twitter accounts and activities through legitimate open-source intelli…☆12Sep 27, 2025Updated last year
- Tools for Wazuh by Juan C. Tello☆17Jan 13, 2022Updated 4 years ago
- Fortify your Active directory in one click☆15Feb 25, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Integrate your Wazuh-Manager or Graylog with the SOCFortress Threat Intel Service☆34Sep 26, 2024Updated 2 years ago
- Comprehensive Sysmon configuration file (sysmon_config.xml) specifically designed for integration with Wazuh SIEM. The configuration is o…☆22Aug 7, 2025Updated last year
- Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag a…☆212Feb 26, 2026Updated 8 months ago
- A clean, client-side dashboard for visualizing Microsoft Intune data exports.☆79Oct 22, 2026Updated 2 weeks ago
- ☆20Jul 30, 2026Updated 3 months ago
- NavSec is the most comprehensive passive web vulnerability and privacy scanner. It performs real-time security analysis directly in your …☆24Sep 13, 2025Updated last year
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆59Mar 22, 2026Updated 7 months ago
- Find silent install switches for a Windows EXE or MSI without running the installer. Try the command in Windows Sandbox, then build a PSA…☆29Oct 29, 2026Updated last week
- Adversary tradecraft detection, protection, and hunting☆15May 8, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Open-source reference implementations and tooling for CMMC Level 2 compliance on on-premise IT/OT environments. Covers CUI handling, USB …☆15Sep 21, 2026Updated last month
- Convert Sigma rules to Wazuh rules☆79Sep 13, 2025Updated last year
- 🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit☆83Apr 16, 2026Updated 6 months ago
- Troubleshooting MDE Workstations☆51Oct 29, 2026Updated last week
- A Windows-native control plane for Microsoft Intune & Entra device management. Rust + WinUI 3 client over a .NET Graph sidecar, with a se…☆36Oct 19, 2026Updated 2 weeks ago
- A Python-based HTTP security header analyzer that identifies weak or missing policies (CSP, HSTS, XFO, etc.) and generates OWASP-aligned …☆13Nov 14, 2025Updated 11 months ago
- Security Monitoring using Wazuh, published by Packt☆48Apr 22, 2026Updated 6 months ago