MCMMCM DocsEngineering (Internal)
HLDModulesSecOps

File System Scanning

VM and host onboarding for file system vulnerability scanning via Wazuh.

File System Scanning

File system scanning onboards virtual machines and physical hosts to enable Wazuh agent-based scanning — covering file integrity monitoring, malware detection, CVE scanning, and compliance checks.


Supported Host Types

  • Linux VMs / EC2 instances
  • Windows hosts
  • Ubuntu servers

Host Onboarding

Hosts are onboarded by providing SSH credentials, which allow the platform to install the Wazuh agent:

FieldRequiredNotes
NameYesDisplay name for the host
DescriptionNoOptional description
IP AddressYesHost IP accessible from the MCM backend
SSH UsernameYes
SSH PasswordYes

Container Orchestration Onboarding

In addition to standalone hosts, container orchestration platforms can also be onboarded for security scanning:

FieldRequiredNotes
NameYes
DescriptionNo
ProviderYesDocker Compose, Kubernetes, Podman, or Docker Swarm
IP AddressYes

API Reference

Hosts

Repo: mcm-api · Table: onboarding_hosts

MethodDescription
POSTCreate a host
GETList all hosts
PUT/PATCHUpdate host details
DELETERemove a host

Container Orchestrations

Repo: mcm-api · Table: onboarding_container_orchestrations

MethodDescriptionNotes
POSTCreate a container orchestration recordContainer count not required at creation; status defaults to Active or Inactive
GETList all container orchestration records
PUT/PATCHUpdate a container orchestration recordProvider cannot be changed after creation; container count not required on update
DELETERemove a container orchestration record

SecOps UI — Hosts Tab

The SecOps UI exposes a Hosts tab for managing onboarded hosts, and a Container Orchestration tab for managing container platforms:

Hosts View Columns

Name · Description · IP · Status

Container Orchestration View Columns

Name · Description · Provider · IP · Status · Container Count

On this page