{"id":8168,"date":"2026-03-16T20:26:45","date_gmt":"2026-03-16T18:26:45","guid":{"rendered":"https:\/\/scalemedia.co.za\/cybermedia\/?post_type=docs&p=8168"},"modified":"2026-03-16T21:26:56","modified_gmt":"2026-03-16T19:26:56","password":"","slug":"lab-building-series-ep4","status":"publish","type":"docs","link":"https:\/\/scalemedia.co.za\/cybermedia\/docs\/lab-building-series-ep4\/","title":{"rendered":"\u00a0Lab Building Series: Ep4"},"content":{"rendered":"\n

Wazuh SIEM & XDR Agent Installation<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n

A SIEM is a software platform that collects security data, like logs and events, from various sources such as endpoints, APIs, and network protocols. It then aggregates, organizes, and analyzes this data to detect anomalies, threats, and compliance issues, alerting cybersecurity analysts. Wazuh uses an XDR agent that feeds data from endpoints back to the SIEM, XDR extends detection and response capabilities across endpoints, networks, and cloud environments for broader threat visibility.<\/p>\n\n\n\n

Download Wazuh<\/h2>\n\n\n\n

Click here<\/a> to download WAZUH after is done open your VirtualBox click on Import button then locate your wazuh installation and click on Finish.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

Now start the machine and the username and default password is: <\/p>\n\n\n\n

wazuh-user
password: wazuh<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

<\/p>\n\n\n\n

Next we need to give our wazuh a static IP Address, First check your interfaces by running ip a on the terminal, I’ve set mine to 10.0.3.6, in order to change your IP Address, run this command.<\/p>\n\n\n\n

\n\n
\n
\n
\n <\/span>\n <\/span>\n <\/span>\n <\/div>\n \n
\n
\n \ud83d\udcd8<\/span>\n <\/div>\n \n
\n filename.js<\/span>\n <\/div>\n <\/div>\n <\/div>\n\n
\n
\n