Chema Martínez

Debian Stretch vulnerabilities are no longer available

2

|Wazuh version|Component|Install type|Install method|Platform| |---|---|---|---|---| | All | Vulnerability Detector | Manager | All | Debian Stretch | ### Description The end of support for Debian 9 Stretch was reached...

Hi team, According to https://github.com/wazuh/wazuh/issues/4211, rootcheck files to perform policy monitoring are deprecated since 3.9.0, when SCA was released. Policies removed in this PR are replaced by the ones located...

Hi team, New iterations are needed for continuously improving SCA policies. Here is a summary of the tasks ahead for them. ## General tasks The following tasks are general for...

Create parent decoders for CEF (Common Event Format)

1

From the LDAPwiki documentation: _Common Event Format (CEF) is a Logging and Auditing file format from ArcSight and is an extensible, text-based format designed to support multiple device types by...

Restructure network information from the Syscollector tables

2

Due to normalize reasons, the network interfaces information is stored by Syscollector in three different tables from one single JSON event collected by Syscollector. Here we have an interface event...

Hi team, Since Wazuh v4.2.0, the vulnerability report for each agent is inventoried in the WUI. This is very useful so the users can analyze the current findings in their...

Hi team, As part of https://github.com/wazuh/wazuh/issues/5628 new options have been added to the Logcollector configuration in order to be able to ignore and restrict specific log entries. The added options...