Wazuh Preparation - socarium/makarasoc GitHub Wiki

Wazuh Preparation

• Access from your browser App, default username and password is:

URL: https://<your-ip-address>

Username: admin

Password: SecretPassword

---

1. Deploy an Agent

1. Login into Wazuh.

2. Observe the home of the wazuh.

3. Find Server Management >> Endpoints Summary.

4. Select Deploy New Agent

5. Fill in the details information about agent.

6. Select Operating system that agent will deployed, and add IP address of wazuh server.

• Recommendation to add sysmon into your Windows or Linux clients.

  • Sysmon for Windows

  • Sysmon fo Linux

---

2. Import Wazuh Dashboard

1. Open menu and select Dashboard Management -> Dashboard Management.

2. Select Saved Object and select import in the top left page.

3. Select import box, and find the ndjson file that already downloaded.

• If you couldn't find it, please download from here.

4. Import ndjson file.

5. Once the import process is finish, click done.

6. Select MakaraSOC to start display the dashboard.