Browse Rules

Search and filter across all detection sources

16 rules

wazuh low xml

sshd: configuration error (moduli).

sshd: configuration error (moduli).

wazuh low xml

sshd: configuration error (AuthorizedKeysCommand)

sshd: configuration error (AuthorizedKeysCommand)

wazuh low xml

SQL Shadow Copy configuration error

SQL Shadow Copy configuration error

sagan unknown other

[BIND] Zone transfer error

[BIND] Zone transfer error

wazuh informational xml

BIND Configuration error.

BIND Configuration error.

wazuh low xml

DNS configuration error.

DNS configuration error.

sagan unknown other

[ARTILLERY] Issue identified - sshd_config allows RootLogin

[ARTILLERY] Issue identified - sshd_config allows RootLogin

sagan unknown other

[SONICWALL] Accept attempt from host without GSC

[SONICWALL] Accept attempt from host without GSC

sagan unknown other

[ARTILLERY] Issue identified - Permissions not set as root

[ARTILLERY] Issue identified - Permissions not set as root

sagan unknown other

[ARTILLERY] Issue identified - vsftp.conf Anonymous FTP allowed

[ARTILLERY] Issue identified - vsftp.conf Anonymous FTP allowed

sagan unknown other

[BIND] Serial number from master is lower than stored

[BIND] Serial number from master is lower than stored

sigma high sigma

Sysmon Configuration Error

Detects when an adversary is trying to hide it's action from Sysmon logging based on error messages

hayabusa high sigma

Sysmon Configuration Error

Detects when an adversary is trying to hide it's action from Sysmon logging based on error messages

sagan unknown other

[ARTILLERY] Issue identified - SSH running on default TCP port 22

[ARTILLERY] Issue identified - SSH running on default TCP port 22

sagan unknown other

[SONICWALL] Access attempt from host without Anti-Virus agent installed

[SONICWALL] Access attempt from host without Anti-Virus agent installed

sagan unknown other

[SONICWALL] Attempted access from host out of compliance with GSC policy

[SONICWALL] Attempted access from host out of compliance with GSC policy