[🔌 Provider]: Wazuh cyber related alerts can be very helpful

[Greatz08]

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
It is cybersec tool which can generate alot of alerts based on how we setup and those can be very helpful for those who are using it and i would like to check its alerts from this project so because of this reason i am sharing this provider

Thankyou very much for this great project :-))

[shahargl]

hey @Greatz08 , thanks for opening this issue :) are you using Keep?

[Motii1]

@Greatz08 It would be nice to have out of the box support for Wazuh, but have you tried to integrate Wazuh with Keep using wazuh custom integration and adding a custom keep provider. I am also interested in this feature

[shahargl]

hey @Motii1, are you from the wazuh team?

[Motii1]

@shahargl No, but I use Wazuh as a security scanner on my servers.
Wazuh alerts generate a lot of noise so Keep seems perfect for alerting, automation, and noise reduction.

I’d be happy to contribute by submitting a PR for a Wazuh provider. However, as I’m relatively new to KeepHQ, I would greatly appreciate any guidance or resources to help me get started.

[shahargl]

@Motii1 let's write it together! how are you about joining our Slack (https://slack.keephq.dev) and we will collaborate on that?

[Greatz08]

@shahargl right now i haven't installed keep but will surely test very soon :-))

[Greatz08]

@Motii1 i havent tested this one out as i am recently trying to setup wazuh again in my system due to some mess i created by mistake :-)

[shahargl]

You can join our slack we already start to collaborate on developing it 💪

[Matvey-Kuk]

Labeling this one as a Good First Issue.

Use https://docs.keephq.dev/providers/adding-a-new-provider as a starting point :)

If you want to work on this, join Slack and we will help: https://slack.keephq.dev/ !

[Motii1]

Labeling this one as a Good First Issue.

Use https://docs.keephq.dev/providers/adding-a-new-provider as a starting point :)

If you want to work on this, join Slack and we will help: https://slack.keephq.dev/ !

Already prepared most of the implementation locally. I will submit PR as soon as possibile 😄

[Matvey-Kuk]

@Motii1 great! I'll assign to you, thank you!