Skip to content

Instantly share code, notes, and snippets.

View asorourx's full-sized avatar

amrx asorourx

View GitHub Profile
@asorourx
asorourx / wazuenroll.ps1
Created March 9, 2026 18:00
Windows WazuH Enrollment
#Requires -RunAsAdministrator
<#
.SYNOPSIS
Wazuh Agent install, enrollment, and removal for Windows.
.DESCRIPTION
Provides three modes:
1) Auto Agent Install — reads from an auth file
2) Manual Agent Install — interactive prompts
3) Remove Agent — fully uninstalls the Wazuh agent
@asorourx
asorourx / wazuenroll.sh
Last active March 11, 2026 02:53
WZ-Enroll.sh
#!/usr/bin/env bash
# wazuh-enroll.sh — Wazuh Agent install, enrollment, and removal (Debian/Ubuntu + macOS)
set -euo pipefail
# ──────────────────────────────────────────────
# Config
# ──────────────────────────────────────────────
SCRIPT_NAME="$(basename "$0")"
WAZUH_MAC_PKG_VER="${WAZUH_MAC_PKG_VER:-4.14.3-1}"
LOG_FILE="/tmp/${SCRIPT_NAME%.*}-$(date +%Y%m%d-%H%M%S).log"
# XCode Command Line Tools
>xcode-select --install
# Install Homebrew
>ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"
>echo PATH=/usr/local/bin:/usr/local/sbin:$PATH >> ~/.bash_profile
>source ~/.bash_profile
>brew tap homebrew/versions
### Keybase proof
I hereby claim:
* I am amrx2k on github.
* I am amrx (https://keybase.io/amrx) on keybase.
* I have a public key ASCf82q-atWK63uHcu94LN1Q28643NuKGIdLi1mdANrzfAo
To claim this, I am signing this object: