IMPLEMENTASI VULNERABILITY DETECTOR WAZUH UNTUK MENDETEKSI KERENTANAN PADA SISTEM OPERASI WINDOWS SERVER

Dafa Setyo Nugroho; Muchammad Sholeh;

Implementasi Vulnerability Detector Wazuh Untuk Mendeteksi Kerentanan

Pada Sistem Operasi Windows Server

Dafa Setyo Nugroho

Windows Server rentan terhadap eksploitasi CVE yang dapat membahayakan keamanan
sistem. Penelitian ini bertujuan mengimplementasikan Vulnerability Detector Wazuh untuk
mendeteksi dan menangani kerentanan CVE pada Windows Server 2022. Konfigurasi
meliputi Wazuh Server, agent, Syscollector, dan Vulnerability Detector (NVD/Microsoft
Security Update Guide). Pengujian menggunakan white box testing untuk validasi sistem.
Deteksi awal menemukan 758 kerentanan (12 Critical, 515 High). Penanganan dengan
patch KB5048667 mencapai penurunan 97,63%, mengeliminasi kategori Critical, dan
mengurangi High/Medium secara signifikan. Penelitian membuktikan Wazuh efektif
mendeteksi real-time dan memverifikasi penanganan kerentanan Windows Server.
Kata Kunci: Wazuh, CVE, Vulnerability Detector, Windows Server, Keamanan Sistem

Implementation of Wazuh Vulnerability Detector to Detect Vulnerabilities in

Windows Server Operating Systems

Dafa Setyo Nugroho

Windows Server is vulnerable to CVE exploitation that can compromise system security.
This study aims to implement Wazuh Vulnerability Detector to detect and address CVE
vulnerabilities on Windows Server 2022. The configuration includes Wazuh Server, agent,
Syscollector, and Vulnerability Detector (NVD/Microsoft Security Update Guide). Testing
uses white box testing to validate the system. Initial detection found 758 vulnerabilities (12
Critical, 515 High). Handling with patch KB5048667 achieved a 97.63% reduction,
eliminating the Critical category, and significantly reducing High/Medium. The study
proves that Wazuh is effective in real-time detection and verification of Windows Server
vulnerability handling.
Keywords: Wazuh, CVE, Vulnerability Detector, Windows Server, Cybersecurity