Wazuh Deployment and Test

1

Installing Wazuh Manager

Reference

Web Link: https://documentation.wazuh.com/current/quickstart.html

WebPage Snapshot

Installation Command

Copied cmd and pasted into Kali terminal

Wazuh installation is done, credentials are highlighted below.

Access Dashboard

Open browser and enter: https://<wazuh-dashboard-ip>:443

Enter Credentials on login page

Wazuh Dashboard

2

Wazuh Agent Installation on Endpoints

Go to Wazuh Dashboard, click on Deploy New Agent and select your machine type, then enter Wazuh Manager PC IP address.

Copy Command

Copy Cmd

Run on Endpoint

Paste the copied cmd on your Endpoint

Start Agent

Now Copy Start agent cmd from Wazuh Dashboard

Paste copied cmd on endpoint.

Result

Agent deployment completed.

Verify Step 3

To verify — Go to Wazuh Dashboard and check

You can see here — in agent list our endpoint is listed now.

3

Alert Testing

Endpoint Details

This is my Endpoint IP address

Nmap Scan

Now I will do Nmap Scan using Kali and check the alert on Wazuh

Started Scanning

Alert Triggered

Dashboard is showing an alert stating Reconnaissance

Reconnaissance In simple terms — gathering information about a target before attacking. (Eg. Think of it like a thief studying a bank before robbing it — checking entry points, guard shifts, cameras — without touching anything yet.)

Wazuh Deployment and Testing

Installing Wazuh Manager

Wazuh Agent Installation on Endpoints

Alert Testing