The use cases described below are performed on an Ubuntu 22.04 endpoint that has a Wazuh agent installed and enrolled to a Wazuh server.
Monitoring file and directory access Monitoring commands run as root Privilege abuse