Provides the WazuhInternalRootcheckConfiguration which allows to parse the rootcheck section of the Wazuh internal configuration.

class WazuhInternalRootcheckConfiguration(**kwargs)

Bases: object

Object representation of the wazuh agent’s internal option rootcheck section.

Wazuh reference: https://documentation.wazuh.com/current/user-manual/reference/internal-options.html#rootcheck

sleep: int | None

Number of milliseconds to sleep after reading one PID or suspicious port.

On this page