wazuh · javimed · Apr 19, 2024 · Apr 15, 2024 · Apr 16, 2024 · Apr 18, 2024
diff --git a/source/images/poc/vulnerabilities-events-new-vuln.png b/source/images/poc/vulnerabilities-events-new-vuln.png
diff --git a/source/images/poc/vulnerabilities-events-solve-vuln.png b/source/images/poc/vulnerabilities-events-solve-vuln.png
diff --git a/source/images/poc/vulnerabilities-ubuntu-alerts.png b/source/images/poc/vulnerabilities-ubuntu-alerts.png
diff --git a/source/images/poc/vulnerabilities-windows-alerts.png b/source/images/poc/vulnerabilities-windows-alerts.png
diff --git a/source/proof-of-concept-guide/poc-vulnerability-detection.rst b/source/proof-of-concept-guide/poc-vulnerability-detection.rst
@@ -20,9 +20,10 @@ Infrastructure
 +===============+============================================================================================================================================+
 | Ubuntu 22.04  | The vulnerability detection module checks for vulnerabilities in the operating system and installed applications in this Linux endpoint.   |
 +---------------+--------------------------------------------------------------------------------------------------------------------------------------------+
-| Windows 11    | The vulnerability detection module checks for vulnerabilities in the operating system and installed applications in this Windows endpoint. |
+| Debian 12     | The vulnerability detection module checks for vulnerabilities in the operating system and installed applications in this Linux endpoint.   |
 +---------------+--------------------------------------------------------------------------------------------------------------------------------------------+
 
+
 Configuration
 -------------
 
@@ -51,12 +52,33 @@ The Vulnerability Detection module is enabled by default. You can perform the fo
 
       $ sudo systemctl restart wazuh-manager
 
+
+Test the configuration
+----------------------
+
+You don’t have to perform any action. Wazuh detects the vulnerable packages installed in the Ubuntu endpoint automatically. The time it takes to detect vulnerabilities depends on the Syscollector :doc:`interval </user-manual/reference/ossec-conf/wodle-syscollector>` configured in the ``ossec.conf`` file.
+
+#. Install ``vim`` in the Debian endpoint with ``sudo apt install vim -y``.
-#. Install ``vim`` in the Debian endpoint with ``sudo apt install vim -y``.
+#. Install ``vim`` in the Debian endpoint with ``sudo apt install vim -y`` to install a vulnerable package. Wait until the syscollector runs a new scan.
-#. Install ``vim`` in the Debian endpoint with ``sudo apt install vim -y``.
+#. Install ``vim`` in the Debian endpoint with ``sudo apt install vim -y`` to install a vulnerable package. Wait until the syscollector runs a new scan.
+
-
-
+#. Wait until the syscollector runs a new scan.
-#. Wait until the syscollector runs a new scan.
-#. Wait until the syscollector runs a new scan.
+
+#. Delete the package with ``sudo apt purge vim -y``.
-#. Delete the package with ``sudo apt purge vim -y``.
+#. Delete the package with ``sudo apt purge vim -y`` to fix the vulnerability.
-#. Delete the package with ``sudo apt purge vim -y``.
+#. Delete the package with ``sudo apt purge vim -y`` to fix the vulnerability.
+
 Visualize the alerts
 --------------------
 
-You can visualize the alert data in the Wazuh dashboard. To do this, go to the Vulnerability Detection module, select Events, and click on any vulnerability to expand the document.
+You can visualize detected vulnerabilities data in the Wazuh dashboard. Go to **Vulnerability Detection** and select **Events** to see a list of all vulnerable packages detected after the first scan.
+
+-  New vulnerability detected:
+
+   .. thumbnail:: /images/poc/vulnerabilities-events-new-vuln.png
+      :title: Detected vulnerabilities on Debian. Vulnerable vim package example
+      :align: center
+      :width: 80%
+
+-  New vulnerability solved:
 
-.. thumbnail:: /images/poc/vulnerabilities-ubuntu-alerts.png
-   :title: Detected vulnerabilities on Ubuntu alerts
-   :align: center
-   :width: 80%
+   .. thumbnail:: /images/poc/vulnerabilities-events-solve-vuln.png
+      :title: Solved vulnerabilities on Debian. Vulnerable vim package example
+      :align: center
+      :width: 80%