ELK Vulnerability Detection

Elastic Security SIEM
1

Hi guys,

I was wondering if the function exists or is being looked at to implement vulnerability detections via the agent like with Wazuh Vulnerability Detection module.

I searched the forum but I'm not seeing, might be using the wrong keywords for my search :slight_smile:

Thanks in advance.

Regards
Eswee

2

Hi @cyberintellect ,

This isn't a feature we have available natively yet. There are 3rd party ways of bringing in vulnerability data, which can be used in conjunction with our OSQuery manager integration to check if a host has vulnerable software installed.

Hope this helps,
James

1 Like
3

Hey James,

Thanks for the feedback :slight_smile:

Cheers
Eswee

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.