Browse Rules

Search and filter across all detection sources

1,110 rules

wazuh low xml

Fortigate: Configuration changed.

Fortigate: Configuration changed.

wazuh informational xml

VirusTotal: Error: Check credentials

VirusTotal: Error: Check credentials

wazuh low xml

Syscheck Audit: $(extra_data)

Syscheck Audit: $(extra_data)

wazuh low xml

telnetd: Remote host invalid connection.

telnetd: Remote host invalid connection.

wazuh low xml

Docker: Error - denied action

Docker: Error - denied action

wazuh low xml

Exim Auth failed

Exim Auth failed

wazuh low xml

Puppet Master: Permission denied

Puppet Master: Permission denied

wazuh low xml

Chrome Remote Desktop attempt - access denied

Chrome Remote Desktop attempt - access denied

wazuh low xml

System Audit: Vulnerable web application found.

System Audit: Vulnerable web application found.

wazuh low xml

OpenVPN: Certificate failed - Possible revoked user

OpenVPN: Certificate failed - Possible revoked user

wazuh low xml

MongoDB: Execute commands without the necessary privileges

MongoDB: Execute commands without the necessary privileges

wazuh medium xml

Exim brute force attack (multiple auth failures).

Exim brute force attack (multiple auth failures).

wazuh low xml

The audit log was cleared

The audit log was cleared

wazuh informational xml

Audit: Created: $(audit.file.name)

Audit: Created: $(audit.file.name)

wazuh informational xml

Audit: Deleted: $(audit.file.name)

Audit: Deleted: $(audit.file.name)

wazuh low xml

The audit log was cleared

The audit log was cleared

wazuh medium xml

telnetd: Multiple connection attempts from same source,(possible scan).

telnetd: Multiple connection attempts from same source,(possible scan).

wazuh low xml

Chrome Remote Desktop attempt - access denied $(win.eventdata.data)

Chrome Remote Desktop attempt - access denied $(win.eventdata.data)

wazuh low xml

VShell user used the maximum number of password attempts.

VShell user used the maximum number of password attempts.

wazuh medium xml

MongoDB: Fatal message

MongoDB: Fatal message

wazuh medium xml

ownCloud FATAL message.

ownCloud FATAL message.

wazuh low xml

MariaDB error message

MariaDB error message

wazuh medium xml

NextCloud FATAL message.

NextCloud FATAL message.

wazuh low xml

VShell user failed to login or user does not exist

VShell user failed to login or user does not exist

wazuh low xml

MySQL: error.

MySQL: error.