Browse Rules

Search and filter across all detection sources

1,445 rules

wazuh medium xml

Maximum authentication attempts exceeded.

Maximum authentication attempts exceeded.
wazuh medium xml

Maximum authentication attempts exceeded.

Maximum authentication attempts exceeded.
sagan low other

[COURIER] Authentication failure

[COURIER] Authentication failure
sagan informational other

[CyberArk] User Authentication

[CyberArk] User Authentication
sagan medium other

[EXTRAHOP] NTLMv1 Authentication

[EXTRAHOP] NTLMv1 Authentication
sagan low other

[ORACLE] Authentication Failure

[ORACLE] Authentication Failure
sagan low other

[PUREFTPD] Authentication failed

[PUREFTPD] Authentication failed
sagan low other

[ROUNDCUBE] - Authentication failed

[ROUNDCUBE] - Authentication failed
sagan high other

[RSYNC] Authentication failure

[RSYNC] Authentication failure
sagan low other

[ZEUS] Authentication failure

[ZEUS] Authentication failure
wazuh informational xml

Deauthorize: Client Authentication logoff.

Deauthorize: Client Authentication logoff.
wazuh informational xml

Authorize: Client Authentication logon.

Authorize: Client Authentication logon.
sagan low other

SASL authentication daemon detected

SASL authentication daemon detected
sentinel medium kql

Ping Federate - Unexpected authentication URL.

'Detects unexpected authentication URL.'

hayabusa high sigma

Possible PetitPotam Coerce Authentication Attempt

Detect PetitPotam coerced authentication activity.
sagan low other

[APACHE] User authentication failed

[APACHE] User authentication failed
sagan low other

[CONFLUENT] Kafka Failed Authentication

[CONFLUENT] Kafka Failed Authentication
sagan critical other

[CONFLUENT] Kafka Successful Authentication

[CONFLUENT] Kafka Successful Authentication
sagan medium other

[EXTRAHOP] LDAP Plaintext Authentication

[EXTRAHOP] LDAP Plaintext Authentication
sagan medium other

[EXTRAHOP] Unusual NTLMv1 Authentication

[EXTRAHOP] Unusual NTLMv1 Authentication
sagan informational other

[JUNIPER] Login authentication error

[JUNIPER] Login authentication error
sagan informational other

[ONELOGIN] AUTHENTICATION_FACTOR_CREATED

[ONELOGIN] AUTHENTICATION_FACTOR_CREATED
sagan informational other

[ONELOGIN] AUTHENTICATION_FACTOR_DELETED

[ONELOGIN] AUTHENTICATION_FACTOR_DELETED
sagan informational other

[ONELOGIN] AUTHENTICATION_FACTOR_UPDATED

[ONELOGIN] AUTHENTICATION_FACTOR_UPDATED
sagan low other

[POSTFIX] SASL authentication failure

[POSTFIX] SASL authentication failure