Intrusion Detection

Breeze Agent enables Cloudaware Intrusion Detection. Use Breeze to deploy and register Wazuh agents, collect host context, and confirm IDS coverage for target hosts.

What Breeze Contributes

• Deploys and manages Wazuh agent components on supported hosts.
• Registers hosts with the Cloudaware-managed Wazuh environment.
• Provides host identity, OS facts, services, and process data that help correlate IDS telemetry with CMDB records.
• Reports agent presence and health signals used to identify monitored and unmonitored assets.

IDS Coverage and Agent Health

When Intrusion Detection is enabled:

• Use Breeze OS facts and service discovery to verify that required agent components are present and running.
• Use CMDB list views, IDS summary tiles on CIs, and Wazuh dashboards to correlate:
  • IDS monitoring status.
  • Wazuh agent registration and health.
  • Breeze OS facts such as hostnames, OS versions, services, and processes.
  • Current alerts, findings, and security-relevant activity on the same assets.

See also: Intrusion Detection.

Related

For deployment patterns and automation entry points, see Breeze Agent Installation and Fleet Deployment.