EDR Basics 1.2 guided exercise i'm stuck

General
1

Can someone please help me with the guided EDR basics lab

2

If you would like help, kindly explain which steps you are stuck on, and include supporting screen shots.

3

Need help with getting the rule ID to popup

EDR basics 1
EDR basics 1823×669 12.7 KB

EDR Basics 2
EDR Basics 2831×697 11.8 KB

EDS basics 3
EDS basics 3748×439 7.56 KB

EDR Basics 4
EDR Basics 41457×565 23.4 KB

4

Here in your output it shows that the Wazuh service is not running:

image
image574×107 1.47 KB

This needs to be resolved or no alerts will be sent to Wazuh.

The most likely cause is an issue with the ossec.conf file.