Introduction While building a multitenant SOC architecture using Wazuh and OpenSearch, I quickly ran into a critical issue: Wazuh alerts do not include the agent group(s) by default. In a setup where each client is represented by a group of agents,...
secops.hashnode.dev3 min read
No responses yet.