8. Restart the Wazuh agent to apply the changes: #systemctl restart wazuh-agent Wazuh server On the Wazuh server, we create a CDB list of authorized USB devices. Additionally, we create a custom rule to trigger an alert when an unauthorized USB device is connected to the monitored endpoint....