{"avoid_when":"只要容器运行时威胁检测（Falco）或单纯漏洞扫描","content_hash":"d6c946adb6b90f7ccea70c0eb653cbd5555c1f2f077e9ffcdee5be4fdc784374","domain":"security","evidence_urls":["https://github.com/wazuh/wazuh"],"id":"wazuh","language":"C","license":"GPL-2.0","name":"Wazuh","niche":"siem xdr","repo":"https://github.com/wazuh/wazuh","source_updated_at":"2026-07-21T21:10:23Z","status":"active","summary":"开源 XDR/SIEM 平台，主机入侵检测与安全事件分析。","tags":["ids","scanning","security","siem"],"use_when":"要自托管主机安全监测/合规与告警中枢","verification_status":"verified","verified_at":"2026-07-21T21:10:23Z"}