File System Scanning
VM and host onboarding for file system vulnerability scanning via Wazuh.
File System Scanning
File system scanning onboards virtual machines and physical hosts to enable Wazuh agent-based scanning — covering file integrity monitoring, malware detection, CVE scanning, and compliance checks.
Supported Host Types
- Linux VMs / EC2 instances
- Windows hosts
- Ubuntu servers
Host Onboarding
Hosts are onboarded by providing SSH credentials, which allow the platform to install the Wazuh agent:
| Field | Required | Notes |
|---|---|---|
| Name | Yes | Display name for the host |
| Description | No | Optional description |
| IP Address | Yes | Host IP accessible from the MCM backend |
| SSH Username | Yes | |
| SSH Password | Yes |
Container Orchestration Onboarding
In addition to standalone hosts, container orchestration platforms can also be onboarded for security scanning:
| Field | Required | Notes |
|---|---|---|
| Name | Yes | |
| Description | No | |
| Provider | Yes | Docker Compose, Kubernetes, Podman, or Docker Swarm |
| IP Address | Yes |
API Reference
Hosts
Repo: mcm-api · Table: onboarding_hosts
| Method | Description |
|---|---|
POST | Create a host |
GET | List all hosts |
PUT/PATCH | Update host details |
DELETE | Remove a host |
Container Orchestrations
Repo: mcm-api · Table: onboarding_container_orchestrations
| Method | Description | Notes |
|---|---|---|
POST | Create a container orchestration record | Container count not required at creation; status defaults to Active or Inactive |
GET | List all container orchestration records | |
PUT/PATCH | Update a container orchestration record | Provider cannot be changed after creation; container count not required on update |
DELETE | Remove a container orchestration record |
SecOps UI — Hosts Tab
The SecOps UI exposes a Hosts tab for managing onboarded hosts, and a Container Orchestration tab for managing container platforms:
Hosts View Columns
Name · Description · IP · Status
Container Orchestration View Columns
Name · Description · Provider · IP · Status · Container Count