Check Wazuh compatibility with new version macOS Ventura 13.5 (AMD64)

[jotacarma90]

Description

Hello team, this issue is to check the full compatibility of Wazuh on the new found version of macOS Ventura 13.5 amd64 operating system.

OSs checks issue: https://github.com/wazuh/wazuh/issues/17387 Instance request issue: https://github.com/wazuh/internal-devel-requests/issues/49

For this, it is necessary to perform the following tests to check that everything works as expected:

• [x] Agent and server (if possible) instalations.
• [x] O.S. reporting in the interface.
• [x] WPK upgrade.
• [x] Enrollment and connectivity with the manager.
• [x] FIM: Schedule mode.
• [ ] ~SCA: Policy support.~
• [x] Vulnerability Detector: Vulnerability support.
• [x] Syscollector: Complete inventory.
• [x] Active Response: port blocking.
• [x] Log capture (Eventchannel for Windows and ULS for macOS).

[jotacarma90]

Testing

:green_circle: Agent and server, (enrollment and connectivity with the manager)

• Agent:

  2023/10/23 12:57:29 wazuh-agentd: INFO: Version detected -> Darwin |ip-172-31-47-123.ec2.internal |22.6.0 |Darwin Kernel Version 22.6.0: Wed Jul  5 22:21:56 PDT 2023; root:xnu-8796.141.3~6/RELEASE_X86_64 |x86_64 [macOS|darwin: 13.5.2 (Ventura)] - Wazuh v4.5.3
  2023/10/23 12:57:29 wazuh-agentd: INFO: Started (pid: 2058).
  2023/10/23 12:57:29 wazuh-agentd: INFO: Using AES as encryption method.
  2023/10/23 12:57:29 wazuh-agentd: INFO: Trying to connect to server ([172.31.68.165]:1514/tcp).
  2023/10/23 12:57:29 wazuh-agentd: INFO: (4102): Connected to the server ([172.31.68.165]:1514/tcp).

• Manager:

  
  2023/10/23 12:57:02 wazuh-authd: INFO: New connection from 172.31.47.123
  2023/10/23 12:57:02 wazuh-authd: INFO: Received request for a new agent (ip-172-31-47-123.ec2.internal) from: 172.31.47.123
  2023/10/23 12:57:02 wazuh-authd: INFO: Agent key generated for 'ip-172-31-47-123.ec2.internal' (requested by any)

###  :green_circle: FIM: Schedule
Configuration:

<directories>/tmp/testschedule</directories>

<details><summary>Scheduled alerts</summary>

![image](https://github.com/wazuh/wazuh/assets/60003131/900b7b90-2203-4a1c-ba72-55724dabec56)
![image](https://github.com/wazuh/wazuh/assets/60003131/b27e56d7-ca39-46e6-912f-cca51fb9c8d4)
![image](https://github.com/wazuh/wazuh/assets/60003131/2117514d-1ca0-4a9a-baf1-fe5e64ae3a14)

</details>

### :green_circle: Syscollector
Configuration by default:

- Agent:

2023/10/24 10:03:16 wazuh-modulesd:syscollector: INFO: Starting evaluation. 2023/10/24 10:03:22 wazuh-modulesd:syscollector: INFO: Evaluation finished.

- Manager

2023/10/24 10:09:57 wazuh-modulesd:syscollector: INFO: Module started. 2023/10/24 10:09:57 wazuh-modulesd:syscollector: INFO: Starting evaluation. 2023/10/24 10:09:58 wazuh-modulesd:syscollector: INFO: Evaluation finished.

![image](https://github.com/wazuh/wazuh/assets/60003131/04b2f331-eeb8-48bc-9e96-32919fc2b388)

###  :green_circle: Active response
Manager configuration:

no restart-wazuh defined-agent 002 7

Afterwards, any level 10 or higher alert generated will restart the indicated agent.

2023/10/24 10:23:10 active-response/bin/restart-wazuh: Starting 2023/10/24 10:23:10 active-response/bin/restart-wazuh: {"version":1,"origin":{"name":"node01","module":"wazuh-execd"},"command":"add","parameters":{"extra_args":[],"alert":{"timestamp":"2023-10-24T10:23:10.634+0000","rule":{"level":7,"description":"Host-based anomaly detection event (rootcheck).","id":"510","firedtimes":2,"mail":false,"groups":["ossec","rootcheck"],"pci_dss":["10.6.1"],"gdpr":["IV_35.7.d"]},"agent":{"id":"002","name":"ip-172-31-47-123.ec2.internal","ip":"172.31.47.123"},"manager":{"name":"wazuh-server"},"id":"1698142990.31720","full_log":"Trojaned version of file '/usr/sbin/apachectl' detected. Signature used: 'bash|^/bin/sh|file\.h|proc\.h|/dev/[^n]|^/bin/.*sh' (Generic).","decoder":{"name":"rootcheck"},"data":{"title":"Trojaned version of file detected.","file":"/usr/sbin/apachectl"},"location":"rootcheck"},"program":"active-response/bin/restart-wazuh"}} 2023/10/24 10:23:13 active-response/bin/restart-wazuh: Ended

### :green_circle: Log capture (Eventchannel for Windows and ULS for macOS)
Configuration

full_command netstat -an | awk '{if ((/^(tcp|udp)/) && ($4 != "*.*") && ($5 == "*.*")) {print $1" "$$ netstat listening ports 360

![image](https://github.com/wazuh/wazuh/assets/60003131/5eb0324f-1217-4c80-971f-529da3219085)

### :green_circle: Upgrade using WPK

[root@wazuh-server wazuh-user]# /var/ossec/bin/agent_upgrade -a 002 -f /home/wazuh-user/wazuh_agent_v4.5.3_macos_x86_64.wpk -d

Upgrading...

Upgraded agents: Agent 002 upgraded: Wazuh v4.5.3 -> Wazuh v4.5.3

### :green_circle: Vulnerabilities detector
![image](https://github.com/wazuh/wazuh/assets/60003131/dc89a42c-b9d1-4f83-8318-be75648aec40)

### :yellow_circle: ~SCA~: Does not apply
Issue related to rework SCA policies in macOS Ventura:
https://github.com/wazuh/wazuh/issues/17319

[mjcr99]

LGTM!

[ncvicchi]

LGTM!