3 ms·
Telemetry is pretty much the norm for XDR. The problem is all this stuff is cloud and not on-prem. Wazuh is great for on-prem, but the profiliferation of SaaS,
by FuriouslyAdrift 3y ago
Telemetry is pretty much the norm for XDR. The problem is all this stuff is cloud and not on-prem. Wazuh is great for on-prem, but the profiliferation of SaaS, etc., makes it extremely difficult to keep a handle on everything.
- spudlyo 3y agoMy feeling is that Wazuh is of little use to anyone besides those aiming to please security auditors, for whom it provides file integrity monitoring and other 20th century best practices that predate our modern world of virtualized short-lived servers.
- FuriouslyAdrift 3y agoI primarily use it as a tool to aggregate logs, alerts, and to proactively audit configurations. It's great at finding people who can't remember passwords or misbehaving services or software.