F.O.S.S.O.C. || Free & open-source Security Operations Centre
GithubTeam
  • Overview
    • Need for this project
    • Aim of this project
    • Network Architecture
    • System Specifications
  • Wazuh Manager
    • Setup
    • Log Behaviour
      • Creating logs for every event
      • Adding custom Wazuh Rules
        • CLI method
        • GUI method
    • Rules
      • Mimikatz Rule
    • Integration
      • With Shuffle
  • Wazuh Agent (Windows)
    • Setup
  • Sysmon
    • Setup
  • TheHive
    • Setup
    • Integrating with Shuffle
  • Cortex
    • Setup
  • Shuffle
    • Setup
    • Workflows
      • Mimikatz Workflow
  • Case Studies
    • Mimikatz
      • Mimikatz execution
      • Wazuh rule
      • Shuffle workflow
  • Conclusion
    • Team
Powered by GitBook
On this page

Was this helpful?

  1. Wazuh Manager
  2. Integration

With Shuffle

In order to integrate Wazuh with Shuffle, add the following tag to the /var/ossec/etc/ossec.conf file.

/var/ossec/etc/ossec.conf
++  <integration>
++    <name>shuffle</name>
++    <hook_url>http://<YOUR_SHUFFLE_URL>/api/v1/hooks/<HOOK_ID></hook_url>
++    <level>3</level>
++    <alert_format>json</alert_format>
++  </integration>
PreviousIntegrationNextSetup

Last updated 1 year ago

Was this helpful?