wazuh
https://github.com/wazuh/wazuh
C
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
C not yet supported28 Subscribers
Add a CodeTriage badge to wazuh
Help out
- Issues
- Invalid UTF-8 in the agent's own configuration stops the config report and affects the event location
- Logcollector readers discard whole events on malformed input instead of recovering
- vulnerability-scanner: agents that never transition disconnected→connected are permanently excluded from initial/full scan
- Remove the Audit plugin configuration when who-data is not enabled
- [Debian] Incorrect alert CVE-2026-15043 affects libdbi-perl
- Logcollector: silence false error on macOS log stream graceful shutdown
- If non-default port is defined for wazuh agents the frontend does not generate the right onboarding procedure
- Rule 92900 does not detect comsvcs.dll MiniDump LSASS dump (grantedAccess 0x1FFFFF, T1003.001)
- SCA cis_win2022: checks 27276-27279 (CIS 18.10.17.x) query the wrong registry key, and 27276 also has a malformed '->' separator
- SCA CIS AlmaLinux 8/9/10: check 'auditctl -l->' is missing a space before the separator, so the rule never splits and the check cannot pass
- Docs
- C not yet supported