Intrusion Detection with Wazuh – Blue Team Series with Hackersploit
In this episode of our Blue Team series with @HackerSploit, we cover intrusion detection with Wazuh. Wazuh is an open source security platform that unifies historically separate functions into a single agent and platform architecture. Protection is provided for public clouds, private clouds, and on-premise data centers.
Chapters:
0:00 Introduction
0:22 What We’ll Be Covering
1:38 Wazuh Prerequisites
1:48 Introduction to Wazuh
3:52 Wazuh Features
4:42 How Does Wazuh Work?
12:19 About Our Lab Environment
14:33 Deploying Wazuh
16:50 Beginning the Practical Demo
17:29 Create Your Own Wazuh Server
23:14 How to Access Your Wazuh Server
25:09 Configuring Wazuh for the First Time
28:48 An Overview of Wazuh Modules
32:31 An Overview of the Management Area
47:17 How to Setup Wazuh Agents
54:52 What Events an Agent Display?
1:04:40 All About Integrity Monitoring
1:06:06 How to Stop the Brute Force
1:16:04 Back to Integrity Monitoring
1:21:08 How to use Filtering
1:23:50 About Vulnerabilities
1:28:1 Making Use of Mitre Intelligence
1:35:06 Conclusion
New to Linode? Get started here with a $100 credit!
Read the doc for more information on deploying Wazuh.
Learn more about Wazuh in the Linode Marketplace.
Subscribe to get notified of new episodes as they come out.
#Linode #wazuh #cybersecurity
Product: Linode, Security, Blue Team; @HackerSploit ;
You might also like…
-
Red Team Security Series
HackerSploit presents a new security series focused on “Red Team” best practices. Take a closer look at red team activities and learn techniques to effectively test your security defenses by conducting internal attacks on your organizations infrastructure to identify and close vulnerabilities. -
Splunk Security Event Monitoring – Blue Team Series with Hackersploit
Splunk is the first data-to-everything platform powered by artificial intelligence, advanced data search, and optimized data streaming. -
Configuring Root Access | HackerSploit Linux Security
In this follow up video to securing your SSH, Alexis from HackerSploit shows how to add users to the sudo group. -
Recovering from a System Compromise | Top Docs
In this video, Jay showcases several methods of system recovery in the event your Linux system has been compromised by a third-party.
