Wazuh v4.8.0 RC 3

Added

• Added the timeout and retries settings to the integratord configuration. (#6442)
• Added support for deploying with Ansible on Windows. (#6640)
• Added Wazuh v4.8.0 release notes. (#6550)
• Added the update_check configuration option. (#6673)
• Added the Filebeat deployment into Wazuh manager worker nodes for distributed deployments with Puppet. (#6872)
• Added keystore management tool section. (#7000) (#7072)
• Added available SCA policies in 4.8.0 version. (#7049)
• Added environment variable for Wazuh indexer in Wazuh on Docker deployment. (#6750) (#7057)
• Added step to remove the ss4o index templates from the Wazuh indexer upgrade guide. (#7093)
• Added deprecation notice for the cache Wazuh API configuration option. (#7106)
• Added warning about 4.8.0 upgrade. (#7135)
• Added the indexer configuration option to the Wazuh API documentation. (#7164)
• Added the offline-url vulnerability detection option to the Reference guide. (#7193)
• Added a note in the Reference guide about the <vulnerability-detector> change. (#7243)
• Added warning message about changing passwords for Docker and Kubernetes deployments. (#7321)
• Addedd sub-section about assigning multiple agents to a group in Grouping agents. (#7309)

Changed

• Updated the logcollector.ip_update_interval setting in the Internal options documentation. (#6373)
• Updated OSD version to 2.10.0. (#6568)
• Updated dashboard settings screenshots. (#6711)
• Changed the Wazuh dashboard home URL in single sign on configuration to just the base path. (#6775) (#6809)
• Enhanced the description and examples of the discard_regex and field feature. (#6770)
• Changed custom branding configuration documents. (#6779)
• Changed the ssl_protocol options and default value. (#6790)
• Updated the minimum supported OS requirement for the Wazuh manager. (#6811)
• Changed the AWS pyarrow PIP dependency version. (#6814)
• Updated a step in Upgrading the Wazuh server. (#6879)
• Updated Filebeat module revision to 0.4. (#6861)
• Updated AWS, Azure, and GCP cloud security dependency installation steps. (#6847)
• Updated the vulnerability detection (VD) sections following the VD module refactor. (#6792) (#7046) (#7058)
• Updated screenshot and module reference from Security events to Threat Hunting in Amazon Security Lake section. (#6956)
• Improved steps in the Google Cloud Platform prerequisites section. (#6964)
• Updated Azure Diagnostics images. (#6987)
• Updated Azure Log Analytics images. (#7002)
• Updated installation-guide/wazuh-server/step-by-step considering configuration requirements for vulnerability detection. (#7149)
• Updated the user-manual/reference/unattended-installation section. (#7162)
• Changed Docker version requirement to 6.0.0. (#7133)
• Updated the Vulnerability detection PoC. (#7215)
• Replaced localhost occurrences. (#7234) (#7285)
• Updated the upgrading central components section. (#7273)
• Updated the Monitoring Office 365 audit logs section. (#7275)
• Updated Installing the Wazuh manager from sources with the latest vulnerability detection changes. (#7316)

Fixed

• Added the wazuh::repo class in Puppet manifest example in install Wazuh agent via Puppet section. (#6954)
• Removed steps to modify the number of shards from the offline installation guide. (#6958)
• Fixed password update step for distributed deployments. (#6967)
• Added fixes and updates to the MITRE ATT&CK framework section. (#6962)
• Modified master node address name to uppercase. (#7127)
• Added securing credentials steps to the Vulnerability detection capability section and the Upgrading central components section. (#7235)
• Replaced Wazuh app and Wazuh plugin references with Wazuh dashboard references. (#7274)

Removed

• Deprecated /vulnerability API endpoints. (#6738)
• Removed implicit id!=000 WQL filter in the search bar. (#6815)
• Removed launchctl unload step from macOS uninstalling manual. (#7123)
• Removed Wazuh_Ruleset.pdf references. (#7142)
• Removed documentation for the allow-os vulnerability detection option. (#7177)
• Removed the Migrating from OSSEC section. (#7301)

Wazuh v4.7.5 RC 1

Added

• Support for Wazuh 4.7.5

Wazuh v4.8.0 RC2

Added

• Added the timeout and retries settings to the integratord configuration. (#6442)
• Added support for deploying with Ansible on Windows. (#6640)
• Added Wazuh v4.8.0 release notes. (#6550)
• Added the update_check configuration option. (#6673)
• Added the Filebeat deployment into Wazuh manager worker nodes for distributed deployments with Puppet. (#6872)
• Added keystore management tool section. (#7000) (#7072)
• Added available SCA policies in 4.8.0 version. (#7049)
• Added environment variable for Wazuh indexer in Wazuh on Docker deployment. (#6750) (#7057)
• Added step to remove the ss4o index templates from the Wazuh indexer upgrade guide. (#7093)
• Added deprecation notice for the cache Wazuh API configuration option. (#7106)
• Added warning about 4.8.0 upgrade. (#7135)
• Added the indexer configuration option to the Wazuh API documentation. (#7164)
• Added the offline-url vulnerability detection option to the Reference guide. (#7193)
• Added a note in the Reference guide about the <vulnerability-detector> change. (#7243)

Changed

• Updated the logcollector.ip_update_interval setting in the Internal options documentation. (#6373)
• Updated OSD version to 2.10.0. (#6568)
• Updated dashboard settings screenshots. (#6711)
• Changed the Wazuh dashboard home URL in single sign on configuration to just the base path. (#6775) (#6809)
• Enhanced the description and examples of the discard_regex and field feature. (#6770)
• Changed custom branding configuration documents. (#6779)
• Changed the ssl_protocol options and default value. (#6790)
• Updated the minimum supported OS requirement for the Wazuh manager. (#6811)
• Changed the AWS pyarrow PIP dependency version. (#6814)
• Updated a step in Upgrading the Wazuh server. (#6879)
• Updated Filebeat module revision to 0.4. (#6861)
• Updated AWS, Azure, and GCP cloud security dependency installation steps. (#6847)
• Updated the vulnerability detection (VD) sections following the VD module refactor. (#6792) (#7046) (#7058)
• Updated screenshot and module reference from Security events to Threat Hunting in Amazon Security Lake section. (#6956)
• Improved steps in the Google Cloud Platform prerequisites section. (#6964)
• Updated Azure Diagnostics images. (#6987)
• Updated Azure Log Analytics images. (#7002)
• Updated installation-guide/wazuh-server/step-by-step considering configuration requirements for vulnerability detection. (#7149)
• Updated the user-manual/reference/unattended-installation section. (#7162)
• Changed Docker version requirement to 6.0.0. (#7133)
• Updated the Vulnerability detection PoC. (#7215)
• Replaced localhost occurrences. (#7234) (#7285)
• Updated the upgrading central components section. (#7273)
• Updated the Monitoring Office 365 audit logs section. (#7275)

Fixed

• Added the wazuh::repo class in Puppet manifest example in install Wazuh agent via Puppet section. (#6954)
• Removed steps to modify the number of shards from the offline installation guide. (#6958)
• Fixed password update step for distributed deployments. (#6967)
• Added fixes and updates to the MITRE ATT&CK framework section. (#6962)
• Modified master node address name to uppercase. (#7127)
• Added securing credentials steps to the Vulnerability detection capability section and the Upgrading central components section. (#7235)
• Replaced Wazuh app and Wazuh plugin references with Wazuh dashboard references. (#7274)

Removed

• Deprecated /vulnerability API endpoints. (#6738)
• Removed implicit id!=000 WQL filter in the search bar. (#6815)
• Removed launchctl unload step from macOS uninstalling manual. (#7123)
• Removed Wazuh_Ruleset.pdf references. (#7142)
• Removed documentation for the allow-os vulnerability detection option. (#7177)
• Removed the Migrating from OSSEC section. (#7301)

Wazuh v4.8.0 RC 1

Added

• Added the timeout and retries settings to the integratord configuration. (#6442)
• Added support for deploying with Ansible on Windows. (#6640)
• Added Wazuh v4.8.0 release notes. (#6550)
• Added the update_check configuration option. (#6673)
• Added the Filebeat deployment into Wazuh manager worker nodes for distributed deployments with Puppet. (#6872)
• Added keystore management tool section. (#7000) (#7072)
• Added available SCA policies in 4.8.0 version. (#7049)
• Added environment variable for Wazuh indexer in Wazuh on Docker deployment. (#6750) (#7057)
• Added step to remove the ss4o index templates from the Wazuh indexer upgrade guide. (#7093)
• Added deprecation notice for the cache Wazuh API configuration option. (#7106)
• Added warning about 4.8.0 upgrade. (#7135)
• Added the indexer configuration option to the Wazuh API documentation. (#7164)
• Added the offline-url vulnerability detection option to the Reference guide. (#7193)
• Added a note in the Reference guide about the <vulnerability-detector> change. (#7243)

Changed

• Updated the logcollector.ip_update_interval setting in the Internal options documentation. (#6373)
• Updated OSD version to 2.10.0. (#6568)
• Updated dashboard settings screenshots. (#6711)
• Changed the Wazuh dashboard home URL in single sign on configuration to just the base path. (#6775) (#6809)
• Enhanced the description and examples of the discard_regex and field feature. (#6770)
• Changed custom branding configuration documents. (#6779)
• Changed the ssl_protocol options and default value. (#6790)
• Updated the minimum supported OS requirement for the Wazuh manager. (#6811)
• Changed the AWS pyarrow PIP dependency version. (#6814)
• Updated a step in Upgrading the Wazuh server. (#6879)
• Updated Filebeat module revision to 0.4. (#6861)
• Updated AWS, Azure, and GCP cloud security dependency installation steps. (#6847)
• Updated the vulnerability detection (VD) sections following the VD module refactor. (#6792) (#7046) (#7058)
• Updated screenshot and module reference from Security events to Threat Hunting in Amazon Security Lake section. (#6956)
• Improved steps in the Google Cloud Platform prerequisites section. (#6964)
• Updated Azure Diagnostics images. (#6987)
• Updated Azure Log Analytics images. (#7002)
• Updated installation-guide/wazuh-server/step-by-step considering configuration requirements for vulnerability detection. (#7149)
• Updated the user-manual/reference/unattended-installation section. (#7162)
• Changed Docker version requirement to 6.0.0. (#7133)
• Updated the Vulnerability detection PoC. (#7215)
• Replaced localhost occurrences in the Offline installation guide and the Wazuh dashboard step-by-step installation guide. (#7234)

Fixed

• Added the wazuh::repo class in Puppet manifest example in install Wazuh agent via Puppet section. (#6954)
• Removed steps to modify the number of shards from the offline installation guide. (#6958)
• Fixed password update step for distributed deployments. (#6967)
• Added fixes and updates to the MITRE ATT&CK framework section. (#6962)
• Modified master node address name to uppercase. (#7127)
• Added securing credentials steps to the Vulnerability detection capability section and the Upgrading central components section. (#7235)

Removed

• Deprecated /vulnerability API endpoints. (#6738)
• Removed implicit id!=000 WQL filter in the search bar. (#6815)
• Removed launchctl unload step from macOS uninstalling manual. (#7123)
• Removed Wazuh_Ruleset.pdf references. (#7142)
• Removed documentation for the allow-os vulnerability detection option. (#7177)

Wazuh v4.7.4

Added

• Support for Wazuh 4.7.4

Wazuh v4.8.0 Beta 6

Added

• Added the timeout and retries settings to the integratord configuration. (#6442)
• Added support for deploying with Ansible on Windows. (#6640)
• Added Wazuh v4.8.0 release notes. (#6550)
• Added the update_check configuration option. (#6673)
• Added the Filebeat deployment into Wazuh manager worker nodes for distributed deployments with Puppet. (#6872)
• Added keystore management tool section. (#7000) (#7072)
• Added available SCA policies in 4.8.0 version. (#7049)
• Added environment variable for Wazuh indexer in Wazuh on Docker deployment. (#6750) (#7057)
• Added step to remove the ss4o index templates from the Wazuh indexer upgrade guide. (#7093)
• Added deprecation notice for the cache Wazuh API configuration option. (#7106)
• Added warning about 4.8.0 upgrade. (#7135)
• Added the indexer configuration option to the Wazuh API documentation. (#7164)
• Added the offline-url vulnerability detection option to the Reference guide. (#7193)

Changed

• Updated the logcollector.ip_update_interval setting in the Internal options documentation. (#6373)
• Updated OSD version to 2.10.0. (#6568)
• Updated dashboard settings screenshots. (#6711)
• Changed the Wazuh dashboard home URL in single sign on configuration to just the base path. (#6775) (#6809)
• Enhanced the description and examples of the discard_regex and field feature. (#6770)
• Changed custom branding configuration documents. (#6779)
• Changed the ssl_protocol options and default value. (#6790)
• Updated the minimum supported OS requirement for the Wazuh manager. (#6811)
• Changed the AWS pyarrow PIP dependency version. (#6814)
• Updated a step in Upgrading the Wazuh server. (#6879)
• Updated Filebeat module revision to 0.4. (#6861)
• Updated AWS, Azure, and GCP cloud security dependency installation steps. (#6847)
• Updated the vulnerability detection (VD) sections following the VD module refactor. (#6792) (#7046) (#7058)
• Updated screenshot and module reference from Security events to Threat Hunting in Amazon Security Lake section. (#6956)
• Improved steps in the Google Cloud Platform prerequisites section. (#6964)
• Updated Azure Diagnostics images. (#6987)
• Updated Azure Log Analytics images. (#7002)
• Updated installation-guide/wazuh-server/step-by-step considering configuration requirements for vulnerability detection. (#7149)
• Updated the user-manual/reference/unattended-installation section. (#7162)
• Changed Docker version requirement to 6.0.0. (#7133)

Fixed

• Added the wazuh::repo class in Puppet manifest example in install Wazuh agent via Puppet section. (#6954)
• Removed steps to modify the number of shards from the offline installation guide. (#6958)
• Fixed password update step for distributed deployments. (#6967)
• Added fixes and updates to the MITRE ATT&CK framework section. (#6962)
• Modified master node address name to uppercase. (#7127)

Removed

• Deprecated /vulnerability API endpoints. (#6738)
• Removed implicit id!=000 WQL filter in the search bar. (#6815)
• Removed launchtl unload step from macOS uninstalling manual. (#7123)
• Removed Wazuh_rules.pdf references. (#7142)
• Removed documentation for the allow-os vulnerability detection option. (#7177)

Wazuh v4.8.0 Beta 5

Added

• Added the timeout and retries settings to the integratord configuration. (#6442)
• Added support for deploying with Ansible on Windows. (#6640)
• Added Wazuh v4.8.0 release notes. (#6550)
• Added the update_check configuration option. (#6673)
• Added the Filebeat deployment into Wazuh manager worker nodes for distributed deployments with Puppet. (#6872)
• Added keystore management tool section. (#7000) (#7072)
• Added available SCA policies in 4.8.0 version. (#7049)
• Added environment variable for Wazuh indexer in Wazuh on Docker deployment. (#6750) (#7057)
• Added step to remove the ss4o index templates from the Wazuh indexer upgrade guide. (#7093)
• Added deprecation notice for the cache Wazuh API configuration option. (#7106)
• Added warning about 4.8.0 upgrade. (#7135)

Changed

• Updated the logcollector.ip_update_interval setting in the Internal options documentation. (#6373)
• Updated OSD version to 2.10.0. (#6568)
• Updated dashboard settings screenshots. (#6711)
• Changed the Wazuh dashboard home URL in single sign on configuration to just the base path. (#6775) (#6809)
• Enhanced the description and examples of the discard_regex and field feature. (#6770)
• Changed custom branding configuration documents. (#6779)
• Changed the ssl_protocol options and default value. (#6790)
• Updated the minimum supported OS requirement for the Wazuh manager. (#6811)
• Changed the AWS pyarrow PIP dependency version. (#6814)
• Updated a step in Upgrading the Wazuh server. (#6879)
• Updated Filebeat module revision to 0.4. (#6861)
• Updated AWS, Azure, and GCP cloud security dependency installation steps. (#6847)
• Updated the vulnerability detection (VD) sections following the VD module refactor. (#6792) (#7046) (#7058)
• Updated screenshot and module reference from Security events to Threat Hunting in Amazon Security Lake section. (#6956)
• Improved steps in the Google Cloud Platform prerequisites section. (#6964)
• Updated Azure Diagnostics images. (#6987)
• Updated Azure Log Analytics images. (#7002)
• Updated installation-guide/wazuh-server/step-by-step considering configuration requirements for vulnerability detection. (#7149)
• Updated the user-manual/reference/unattended-installation section. (#7162)

Fixed

• Added the wazuh::repo class in Puppet manifest example in install Wazuh agent via Puppet section. (#6954)
• Removed steps to modify the number of shards from the offline installation guide. (#6958)
• Fixed password update step for distributed deployments. (#6967)
• Added fixes and updates to the MITRE ATT&CK framework section. (#6962)
• Modified master node address name to uppercase. (#7127)

Removed

• Deprecated /vulnerability API endpoints. (#6738)
• Removed implicit id!=000 WQL filter in the search bar. (#6815)
• Removed launchtl unload step from macOS uninstalling manual. (#7123)
• Removed Wazuh_rules.pdf references. (#7142)

Wazuh v4.8.0 Beta 4

Added

• Added the timeout and retries settings to the integratord configuration. (#6442)
• Added support for deploying with Ansible on Windows. (#6640)
• Added Wazuh v4.8.0 release notes. (#6550)
• Added the update_check configuration option. (#6673)
• Added the Filebeat deployment into Wazuh manager worker nodes for distributed deployments with Puppet. (#6872)
• Added keystore management tool section. (#7000) (#7072)
• Added available SCA policies in 4.8.0 version. (#7049)
• Added environment variable for Wazuh indexer in Wazuh on Docker deployment. (#6750) (#7057)
• Added step to remove the ss4o index templates from the Wazuh indexer upgrade guide. (#7093)
• Added deprecation notice for the cache Wazuh API configuration option. (#7106)

Changed

• Updated the logcollector.ip_update_interval setting in the Internal options documentation. (#6373)
• Updated OSD version to 2.10.0. (#6568)
• Updated dashboard settings screenshots. (#6711)
• Changed the Wazuh dashboard home URL in single sign on configuration to just the base path. (#6775) (#6809)
• Enhanced the description and examples of the discard_regex and field feature. (#6770)
• Changed custom branding configuration documents. (#6779)
• Changed the ssl_protocol options and default value. (#6790)
• Updated the minimum supported OS requirement for the Wazuh manager. (#6811)
• Changed the AWS pyarrow PIP dependency version. (#6814)
• Updated a step in Upgrading the Wazuh server. (#6879)
• Updated Filebeat module revision to 0.4. (#6861)
• Updated AWS, Azure, and GCP cloud security dependency installation steps. (#6847)
• Updated the vulnerability detection (VD) sections following the VD module refactor. (#6792) (#7046) (#7058)
• Updated screenshot and module reference from Security events to Threat Hunting in Amazon Security Lake section. (#6956)
• Improved steps in the Google Cloud Platform prerequisites section. (#6964)
• Updated Azure Diagnostics images. (#6987)
• Updated Azure Log Analytics images. (#7002)

Fixed

• Added the wazuh::repo class in Puppet manifest example in install Wazuh agent via Puppet section. (#6954)
• Removed steps to modify the number of shards from the offline installation guide. (#6958)
• Fixed password update step for distributed deployments. (#6967)
• Added fixes and updates to the MITRE ATT&CK framework section. (#6962)

Removed

• Deprecated /vulnerability API endpoints. (#6738)
• Remove implicit id!=000 WQL filter in the search bar. (#6815)

Wazuh v4.7.3

Added

• Support for Wazuh 4.7.3

Wazuh v4.8.0 Beta 3

Added

• Added the timeout and retries settings to the integratord configuration. (#6442)
• Added support for deploying with Ansible on Windows. (#6640)
• Added Wazuh v4.8.0 release notes. (#6550)
• Added the update_check configuration option. (#6673)
• Added the Filebeat deployment into Wazuh manager worker nodes for distributed deployments with Puppet. (#6872)
• Added keystore management tool section. (#7000) (#7072)
• Added available SCA policies in 4.8.0 version. (#7049)
• Added environment variable for Wazuh indexer in Wazuh on Docker deployment. (#6750) (#7057)

Changed

• Updated the logcollector.ip_update_interval setting in the Internal options documentation. (#6373)
• Updated OSD version to 2.10.0. (#6568)
• Updated dashboard settings screenshots. (#6711)
• Changed the Wazuh dashboard home URL in single sign on configuration to just the base path. (#6775) (#6809)
• Enhanced the description and examples of the discard_regex and field feature. (#6770)
• Changed custom branding configuration documents. (#6779)
• Changed the ssl_protocol options and default value. (#6790)
• Updated the minimum supported OS requirement for the Wazuh manager. (#6811)
• Changed the AWS pyarrow PIP dependency version. (#6814)
• Updated a step in Upgrading the Wazuh server. (#6879)
• Updated Filebeat module revision to 0.4. (#6861)
• Updated AWS, Azure, and GCP cloud security dependency installation steps. (#6847)
• Updated the vulnerability detection (VD) sections following the VD module refactor. (#6792) (#7046) (#7058)
• Updated screenshot and module reference from Security events to Threat Hunting in Amazon Security Lake section. (#6956)
• Improved steps in the Google Cloud Platform prerequisites section. (#6964)
• Updated Azure Diagnostics images. (#6987)
• Updated Azure Log Analytics images. (#7002)

Fixed

• Added the wazuh::repo class in Puppet manifest example in install Wazuh agent via Puppet section. (#6954)
• Removed steps to modify the number of shards from the offline installation guide. (#6958)
• Fixed password update step for distributed deployments. (#6967)
• Added fixes and updates to the MITRE ATT&CK framework section. (#6962)

Removed

• Deprecated /vulnerability API endpoints. (#6738)
• Remove implicit id!=000 WQL filter in the search bar. (#6815)