F.O.S.S.O.C. || Free & open-source Security Operations Centre
GithubTeam
  • Overview
    • Need for this project
    • Aim of this project
    • Network Architecture
    • System Specifications
  • Wazuh Manager
    • Setup
    • Log Behaviour
      • Creating logs for every event
      • Adding custom Wazuh Rules
        • CLI method
        • GUI method
    • Rules
      • Mimikatz Rule
    • Integration
      • With Shuffle
  • Wazuh Agent (Windows)
    • Setup
  • Sysmon
    • Setup
  • TheHive
    • Setup
    • Integrating with Shuffle
  • Cortex
    • Setup
  • Shuffle
    • Setup
    • Workflows
      • Mimikatz Workflow
  • Case Studies
    • Mimikatz
      • Mimikatz execution
      • Wazuh rule
      • Shuffle workflow
  • Conclusion
    • Team
Powered by GitBook
On this page

Was this helpful?

  1. Wazuh Manager

Log Behaviour

PreviousSetupNextCreating logs for every event

Last updated 1 year ago

Was this helpful?

Wazuh by default only logs events when a rule is triggered.

We can set the Wazuh Manager such that:

  • It creates logs for .

  • It creates logs based on the that we create.

every event
custom rules