Wazuh SIEM & Zenarmor NGFW Integration using Syslog

Опубликовано: 24 Август 2023
на канале: LS111 Cyber Security Education
9,378
181

NOTE: This video is sponsored by Zenarmor and I do receive a small percentage back for every referral that signs up using the link, which gets put towards my Zenarmor subscription.

Welcome to my channel!

In this video, we are going to integrate Zenarmor NGFW with the open-source Wazuh SIEM/SDR by ingesting Syslog messages generated by Zenarmor. I will walk you through the setting up of custom Wazuh decoders and rules and we are going to test how Zenarmor blocks access to a potential phishing website and creates the event alerts in Wazuh for further analysis.

This video supplements my cyber security lab building series, so if you want to learn how to install Wazuh and Zenarmor before attempting this integration I have included the Wazuh installation tutorial as well as the Zenarmor installation tutorial in the playlists linked below.

P.S. Please don't forget to like and subscribe and share with your friends!

🔗Sign up link: https://sunnyvalley.cloud/?r=SVNRUZSU...


Zenarmor Playlist:
   • Improve your cyber security using Zen...  

Cyber Security Lab Building Series Playlist:
   • Virtual Cyber Security Lab Building S...  


Blog post:
https://ls111.me/integrating-zenarmor...



DISCLAIMER: All information, techniques, and tools showcased in these videos are for educational and ethical penetration testing purposes ONLY. NEVER attempt to use this information to gain unauthorized access to systems without the EXPLICIT consent of its owners. This is a punishable offense by law in most countries.

#zenarmor #wazuh #SIEM #XDR #NGFW #cybersecurity #soc #blueteam