git: 9d04f570cd - main - Status/2024Q4/wazuh.adoc: Add report
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 09 Jan 2025 10:58:21 UTC
The branch main has been updated by salvadore: URL: https://cgit.FreeBSD.org/doc/commit/?id=9d04f570cde02ffc9269ca77092119eafeeb9be5 commit 9d04f570cde02ffc9269ca77092119eafeeb9be5 Author: José Alonso Cárdenas Márquez <acm@FreeBSD.org> AuthorDate: 2025-01-09 10:45:55 +0000 Commit: Lorenzo Salvadore <salvadore@FreeBSD.org> CommitDate: 2025-01-09 10:49:39 +0000 Status/2024Q4/wazuh.adoc: Add report Reviewed by: status (Pau Amma <pauamma@gundo.com>, Chris Moerz <freebsd@ny-central.org>) Differential Revision: https://reviews.freebsd.org/D48279 --- .../en/status/report-2024-10-2024-12/wazuh.adoc | 36 ++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/website/content/en/status/report-2024-10-2024-12/wazuh.adoc b/website/content/en/status/report-2024-10-2024-12/wazuh.adoc new file mode 100644 index 0000000000..5632312e0b --- /dev/null +++ b/website/content/en/status/report-2024-10-2024-12/wazuh.adoc @@ -0,0 +1,36 @@ +=== Wazuh on FreeBSD + +Links: + +link:https://www.wazuh.com/[Wazuh] URL: link:https://www.wazuh.com/[] + + +Contact: José Alonso Cárdenas Márquez <acm@FreeBSD.org> + +Wazuh is a free and open source platform used for threat prevention, detection, and response. +It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments. + +Wazuh solution consists of an endpoint security agent, deployed to the monitored systems, and a management server, which collects and analyzes data gathered by the agents. +Besides, Wazuh has been fully integrated with the Elastic Stack or OpenSearch Stack, providing a search engine and data visualization tool that allows users to navigate through their security alerts. + +After a long break, ports has been updated to include Wazuh version 4.9.2. +This version of Wazuh uses Python 3.11 instead of 3.10, and it includes some new features: + +* support to get ports info, +* support to get processes info, +* improved memory info, +* FreeBSD decoder and rule files, and +* link:https://github.com/alonsobsd/wazuh-freebsd[FreeBSD Security Configuration Assessment files] for 13.x, 14.x and 15-CURRENT. + +Also, FreeBSD ports include a custom version of wazuh-dashboard-plugins for a better integration with FreeBSD. + +Wazuh can easily be installed in a jail by following the link:https://github.com/AppJail-makejails/wazuh[Wazuh AppJail-Makejails] tutorial. + +Anyone interested in helping with the project or interested in aarch64 device donation for testing/packaging is welcome. + +Current version: 4.9.2 + +TODO + +* Add Wazuh cluster-mode infrastructure AppJail makejails +* Add vulnerability detection support to FreeBSD Wazuh agent +* Add FreeBSD as officially supported platform by Wazuh Inc +* Update FreeBSD SCA Policies to new FreeBSD CIS Benchmark