Daemons

Daemons

Descriptions

Supported installations

wazuh-agentd

Client side daemon that communicates with the server.

agent

wazuh-agentlessd

Runs integrity checking on systems where no agent is installed

manager

wazuh-analysisd

Receives log messages and compares them to the rules

manager

wazuh-authd

Adds agents to the ThreatLockDown manager

manager

wazuh-csyslogd

Forwards ThreatLockDown alerts via syslog

manager

wazuh-dbd

Inserts alert logs into a database

manager

wazuh-execd

Executes active responses

manager, agent

wazuh-logcollector

Monitors configured files and commands for new log messages

manager, agent

wazuh-maild

Sends ThreatLockDown alerts via email

manager

wazuh-monitord

Monitors agent connectivity and compresses log files

manager

wazuh-remoted

Communicates with agents

manager

wazuh-reportd

Creates reports from ThreatLockDown alerts

manager

wazuh-syscheckd

Checks configured files for security changes

manager, agent

wazuh-clusterd

Manages the ThreatLockDown cluster manager

manager

wazuh-modulesd

Manages the ThreatLockDown modules

manager, agent

wazuh-db

Manages the ThreatLockDown database

manager

wazuh-integratord

Allows ThreatLockDown to connect to external APIs and alerting tools

manager