Wazuh adds AI Analyst reports and LLM integrations for SOC workflows
Original title: Wazuh and AI for Enhanced SOC Workflows
Wazuh Cloud's AI Analyst uses Amazon Bedrock and Claude to email scheduled posture reports, while self-hosted Llama 3 or Claude 3.5 Haiku options support threat hunting.
Wazuh describes AI-assisted workflows for security operations centers, including the Wazuh AI Analyst on Wazuh Cloud, which processes security data through Amazon Bedrock and Anthropic's Claude and periodically emails reports on indicators, alerts, vulnerabilities, and posture. The company says subscription data is not shared with third parties or used to train models. Self-hosted options run Llama 3 via Ollama locally, while a cloud option exposes Claude 3.5 Haiku through the OpenSearch Assistant.
- AI Analyst reports cover key indicators, alert volume, endpoints, active vulnerabilities, and posture.
- Self-hosted integration keeps all data on-premises via Ollama and a FAISS-backed chatbot.
- Claude 3.5 Haiku integration is surfaced through OpenSearch Assistant in the dashboard.
- Wazuh says outputs are advisory and must be validated against organizational policies.
- AI models
- ClaudeClaude 3.5 HaikuLlama 3
From the original article
3 min read at thehackernews.com
Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.