Introduction

If you are very familiar with both Wazuh and OpenCTI, feel free to skip to architecture to read about the connector, or if you are impatient, skip to installation. If you are very, very impatient, have a look at quick start.

If you are showing interest in this connector, it is assumed that you are already a Wazuh user. After all, the connector has little to no use unless you have Wazuh deployed. Installing, configuring and using Wazuh is very much out of scope of this documentation, as it focuses on OpenCTI.

Even if you are a Wazuh user, take a look at the Wazuh chapter to ensure that you are familiar with the core concepts.

Next, look at the OpenCTI chapter and then the connector architecture.