An infection — an instant scan and notice

On an alert about suspicious activity, the scenario runs an antivirus scan on the machine itself and sends the result to the responsible people.

  • A scan starts right after the alert
  • Minor signals are filtered out
  • Exactly the suspicious spot is scanned
  • The result — in botHelp
WebhookSSH
Set it up for yourselfScriptera

How it works

To get botHelp notifications in Webhook, you don't need a developer: a ready-made scenario watches events and sends messages for you.

  1. Starts when: Wazuh Alert
  2. Check: Check High Severity
  3. If yes: Summarize Alert
  4. Then: Extract Path
  5. Then: Run AV Scan
  6. Then: Notify Stateholders via Telegram
  7. Then: OpenAI Chat Model
  8. Then: OpenAI Chat Model1

You can launch this botHelp + Webhook integration in Scriptera: describe the task in plain words — the scenario is built, launched and monitored for you.

Similar scenarios