Search and filter across all detection sources
56 rules
[SONICWALL] ActiveX access denied
[EXTRAHOP] FTP Access Denied Error
[EXTRAHOP] SMB Access Denied Errors
[MYSQL] Access denied for user
[NETSKOPE] Access Denied Event Detected
[APACHE] Mod_Security Access denied
[Barracuda] WAF Access Control access denied
[SONICWALL] ActiveX or Java archive access denied
[SONICWALL] Administrator Access denied due to bad credentials
[ZSCALER-ZPA] Private application access denied (no matching policy)
[CISCO-PIXASA] WebVPN access DENIED to specified location url
Chrome Remote Desktop attempt - access denied
[CISCO-PIXASA] WebVPN has not been successfully authenticated. Access denied
[EXPERIMENTAL][WINDOWS-SECURITY] SMB - Anonymous Access Denied to ADMIN$ Share
[CISCO-PIXASA] TCP access denied by ACL - Multiple Attempts [25/5]
ModSecurity: access denied.
CTERA Mass Access Denied Detection Analytic
This analytic rule detects and alerts when access denied operations generated by the CTERA Edge Filer goes over a predefined threshold
Chrome Remote Desktop attempt - access denied $(win.eventdata.data)
Netscaler: Multiple http resource access denied
Netscaler: Multiple non-http resource access denied
Netscaler: Multiple AAATM http resource access denied
AWS IAM Access Denied Discovery Events
Detects excessive AccessDenied events within an hour timeframe from an IAM User
ModSecurity Access denied messages grouped