Monitoring & Security
Wazuh
SIEM, file integrity monitoring and vulnerability detection
About this program
Collects security events from every host, correlates them into incidents, watches critical files for unexpected change and reports known vulnerable packages.
Features
- Log and event collection from all hosts
- File integrity monitoring on critical paths
- Rootkit and anomaly detection
- Vulnerability inventory against CVE feeds
Why we chose it
Because 'we would notice' is not a security control. A SIEM turns an unverifiable assumption into a queryable record.
Related programs
