MVladislavDependencies install for wazuh-regex and yq+jq:
$wget https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-manager/wazuh-manager_4.9.1-1_amd64.deb
$mkdir wazuh-manager && dpkg-deb -R wazuh-manager_4.9.1-1_amd64.deb wazuh-manager
$cp ./wazuh-manager/var/ossec/bin/wazuh-regex .
$mkdir wazuh-lib && cp -r ./wazuh-manager/var/ossec/lib/* ./wazuh-lib
$rm wazuh-manager* -rf
$chmod u+x wazuh-regex
$apt install yq jqExamples how to run the script:
# Run all sca rules with file './cis_ubuntu24-04.yml'
$bash ./sca.sh -pdc
# Get help info
$bash ./sca.sh -h
# Run sca rule by ID from file './cis_ubuntu24-04.yml'
$bash ./sca.sh -soc -pdc -i <ID>$wget -O ./cis_ubuntu22-04.yml \
https://raw.githubusercontent.com/wazuh/wazuh/refs/heads/master/ruleset/sca/ubuntu/cis_ubuntu22-04.yml- Section1 (66) (63) (-3)
- Section2 (43) (42) (-1)
- Section3 (18) (17) (-1)
- Section4 (29) (23) (-6)
- Section5 (71) (68) (-3)
- Section6 (62) (53) (-9)
- Section7 (23) (18) (-5)
MIT