Category: digital-forensics

  • Wazuh, Sysmon:  Invisible

    Wazuh, Sysmon: Invisible

    I was staring at my Wazuh dashboard, knowing full well that Sysmon was running on my endpoints, yet the alerts were silent. The default Wazuh…