Nelson Tovar ntovarsolorzano

How to write correlation between Rules in Wazuh

November 1st 2023 | by Jorge Marino | Wazuh 4.6

A common question among Wazuh users is how to trigger a rule, after two other rules were triggered.

The current Wazuh Rules' syntax does not include any mechanism to achieve this purpose right out of the box.

Do the following steps to access Remote Desktop of you VM instance from GCP

1 .Install Chrome Remote Desktop

update the package manager data and install wget and tasksel

sudo apt update
sudo apt install --assume-yes wget tasksel

Download and install the Debian Linux Chrome Remote Desktop installation package:

Install TrueNAS SCALE on a partition instead of the full disk

The TrueNAS installer doesn't have a way to use anything less than the full device. This is usually a waste of resources when installing to a modern NVMe which is usually several hundred of GB. TrueNAS SCALE will use only a few GB for its system files so installing to a 16GB partition would be helpful.

The easiest way to solve this is to modify the installer script before starting the installation process.

Idea from ShinyMarusu @ Reddit:

https://www.reddit.com/r/Piracy/comments/auhyxk/how_do_i_download_from_panbaidu/eovyg8g/
I just unintentionally discovered how to do it after searching how to create an account for day and a half. LOL hope it works for you too.
First go to this link (baidu cloud app) to register. Use your phone number to get the verification code and enter. For the rest, use google to translate the page and put your email adress, name, etc. and you're good to go. This method logs you to the cloud directly so you just step over the problematic pan,baidu registration which rejects non-chinese phone numbers for some reason. After registering I refreshed the page of the file I was trying to download and it showed me as already logged in, then I FINALLY could download the mod. It's sad this method isn't listed anywhere, I really searched a lot... Anyways, good luck!

More notes:

It's a pain in the rear. It took me an hour, but at least it worked.
Get an Chinese email. You will use it as yo

	=============================================
	Splunk Enterprise
	=============================================

	wget -O splunk-8.2.6-a6fe1ee8894b-x64-release.msi "https://download.splunk.com/products/splunk/releases/8.2.6/windows/splunk-8.2.6-a6fe1ee8894b-x64-release.msi"

	wget -O splunk-8.2.6-a6fe1ee8894b-windows-32.zip "https://download.splunk.com/products/splunk/releases/8.2.6/windows/splunk-8.2.6-a6fe1ee8894b-windows-32.zip"

	wget -O splunk-8.2.6-a6fe1ee8894b-linux-2.6-amd64.deb "https://download.splunk.com/products/splunk/releases/8.2.6/linux/splunk-8.2.6-a6fe1ee8894b-linux-2.6-amd64.deb"

	# Script to install RealVNC server

	# Install the latest updates for the system
	sudo apt-get update
	sudo apt-get upgrade -y
	sudo apt-get dist-upgrade -y

	# Install RealVNC server
	# sudo apt-get install -y realvnc-vnc-server
	curl -L -o VNC https://www.realvnc.com/connect/download/binary/latest/debian/64-bit/

	# Serve requests only for virtual host set in environment variable
	{$CADDYHOST}

	# Bind Virtual Host to address set in environment
	bind {$CADDYBIND}

	# Registration email for automated issuing of Lets Encrypt certs
	tls {$CADDYEMAIL}

	# Define the web server root (using environment variable)

Service	Type	Storage	Limitations
Amazon DynamoDB	⚠️ Proprietary NoSQL	25 GB	⚠️ Payment method required
Amazon RDS	⚠️ Proprietary RDBMS		⚠️ Only free for 1 year
Azure SQL Database	MS SQL Server		⚠️ Only free for 1 year
👉 Clever Cloud	PostgreSQL, MySQL, MongoDB, Redis	256 MB (PostgreSQL)	Max 5 connections (PostgreSQL)

	# Setup VNC server

	sudo apt-get remove -y tightvncserver
	sudo apt-get install -y tightvncserver
	mkdir -p "$HOME/.vnc"
	vncpasswd -f <<< $PASSWORD > "$HOME/.vnc/passwd"

	# VNC at startup

	sudo tee /etc/init.d/tightvnc > /dev/null <<EOF