Wazuh¶

compose

Open-source XDR/SIEM. Upstream's own compose changes per release, so it's fetched fresh rather than pinned stale.

Wazuh screenshot

Location¶

/opt/detectops/logging-siem/compose/wazuh/README.txt

Manual step required

clone wazuh/wazuh-docker yourself the first time you're online

Part of the Logging & SIEM toolset in DetectOps.