The Watcher

This versatile security app checks for vulnerabilities, watches logs, and acts as a single interface for other tools.

- By Franciszek Pokryszko

Cyberattacks have not lost their power. Many companies and individuals are at risk from various types of calculated attacks. Education and user awareness are very important for combating the danger of cyberattacks. Unfortunately, sometimes sysadmins don’t find the necessary information in time because the techniques for breaking through security are constantly changing. One of the best practices is to install a security system that will collect all information about computers and inform the security team about threats. For many users, Wazuh [1] might be the answer.

Wazuh is a free and open source security platform that provides unified XDR and SIEM protection for endpoints and cloud workloads. Wazuh components abide by the GNU General Public License version 2 and the Apache License Version 2.0. The Wazuh agent is a single and lightweight monitoring tool. You can deploy the agent on laptops, desktops, servers, cloud instances, containers, or virtual machines. You can also use the agent to obtain information about vulnerabilities.

Wazuh can detect malware threats, identify vulnerabilities, monitor file integrity, and display information on system inventory. Another important benefit of Wazuh is that it is easy to integrate with other tools.

To detect vulnerabilities, the Wazuh agents collect a list of installed applications from monitored endpoints and send it periodically to the Wazuh server. Within the Wazuh server, the Vulnerability Detection module correlates the software inventory data with vulnerability content documents to detect vulnerable software on the monitored endpoint. The Vulnerability Detection module generates alerts when it detects new vulnerabilities or when a vulnerability is fixed due to a package update, removal, or system upgrade. The alerts mean you do not have to monitor the console and check the scan results every day.

What to Do with Wazuh