id: wazuh-detect

info:
  name: wazuh detect
  author: cyllective
  severity: info
  description: Detects wazuh
  tags: tech,wazuh
  references:
    - https://github.com/wazuh/wazuh

requests:
  - method: GET
    path:
      - "{{BaseURL}}/app/login"

    matchers:
      - type: word
        part: body
        condition: or
        words:
          - '"id":"wazuh"'
          - '"title":"Wazuh"'
          - '"icon":"plugins/wazuh/img/icon_blue.png"'
          - '"url":"/app/wazuh"'