Wazuh's New Active Response - See What Makes the New Active Response So Great!

[@arunrmyt]

Integrating openEDR with Ossec/wazuh would make active response even better. Or if not openedr atleast defender.

[@numanmaavia8575]

Great info

[@marciusdacosta]

Need show how to create a "delete" situation. The "add" is very easy.

[@xSig10x]

Would love a tutorial on how to get wazuh to read the data appended to the active-responses.log. Thanks a mil!

[@taylorwalton_socfortress]

Hey, this should be enabled by default with the below block: syslog /var/ossec/logs/active-responses.log However, you may have to build your own custom decoder depending on the log entries

[@broph3n]

Could you make a getting started with wazuh playlist?

[@taylorwalton_socfortress]

Hey, if you start with the first video of the "Host Intrusion Detection System" playlist. This will cover wazuh basics

[@AshikurRahman-go1sc]

Video is not clear !! Text is not clear when you show cmd text!!!!

[@taylorwalton_socfortress]

Hey Ashikur, I will adjust and make improvements. Thanks for the feedback