Cross-Cluster Search (CCS) Wazuh
Step by step PDF guide to set up Wazuh CCS for centralized MSSP multi client management.
·625.7 KB·sha256:3f4a8dde294d273ee0966a80b422009e0c4258fbab94c2e8b3181e9f8faf7c39
Utils: resources built for execution.
A focused library of downloadable resources for security engineers, SOC analysts, and operators, including Excel sheets, presentations, templates, and archives for planning, reporting, and day-to-day execution.
Free browser app · MITRE ATT&CK v20.0
ATT&CK Intelligence View
MITRE ATT&CK Navigator is outdated! ATT&CK Intelligence View brings live filtering, detection coverage mapping, threat actor context, TID comparison, and export-ready reports into one browser-based MITRE ATT&CK matrix.
- 6 connected filters
- Detections & D3FEND 1.6.0
- TID gap analysis
- Excel & PNG export
- 10 interactive tutorials
Free browser app · Sigma rules for MITRE ATT&CK v20.0
Sigma Rules for MITRE ATT&CK
Browse published Sigma detection rules mapped to every MITRE ATT&CK technique, filterable by platform, tactic, data source, and data component, plus a full guide to the Sigma v2.1 rule spec.
- 517 techniques covered
- 1,649 published rules
- Platform & tactic filters
- Sigma v2.1 spec guide
- Copy-ready rule YAML
Open source · MIT · Windows & Linux
LogGen
Test your SIEM detections without waiting for a real attack. LogGen generates correctly structured log records for Windows, Linux, macOS, web servers, databases, firewalls and cloud platforms, then ships them over syslog to Wazuh or anything else that listens.
- 348 controls
- 16 log sources
- Windows, Linux, macOS & cloud
- Syslog to any SIEM
- Single binary, no dependencies
Guide: Role-Based User Creation in Wazuh
Learn how to create read-only users in Wazuh using role-based access control (RBAC). Includes custom roles, permission mapping, and least-privilege access configuration.
·999.0 KB·sha256:cd639f78b1d6d6f7695a0c6e909007da777345e5015f65cdedee219a19147455
MITRE ATT&CK Tactics and Detection Controls
Explore each MITRE ATT&CK tactic and the detection controls required to achieve visibility, strengthen detection coverage, and build an effective threat detection program.
·7.5 MB·sha256:629a429bb1cdecb1e636c3fbddd0885e19a3df66706daa7bf9014396c4c0777f
IOC Extractor: PDF to Excel for SOC
Extract IOCs from PDFs to Excel instantly. Built for SOC analysts and incident responders.
·62.7 MB·sha256:b5c703739f66a23651f00daa7011d0241bd3cb61abb07c22d62239cb9084353b
ISO 27001 to SOC 2 Coverage Tool
Set the status of all 93 ISO 27001 Annex A controls and watch SOC 2 coverage recalculate across 61 criteria and 330 points of focus. Includes a crosswalk, a full register and a gap analysis sheet.
·157.4 KB·sha256:e87cd07eaa7962a795cecda9188fd1ebb58906329909c8a4b5bcf4770560f968
SOC 2 Trust Services Criteria Full Register
All 61 criteria and 330 points of focus in one workbook. Answer eight scope questions and every row marks itself in or out, with a suggested control, evidence, owner tracking and a live dashboard.
·200.1 KB·sha256:99c1259becdce0ad0e543260cb19adc46bae2bc2565ceb75f3a4fda6955059d1