Browse Rules

Search and filter across all detection sources

281 rules

wazuh medium xml

Maximum authentication attempts exceeded.

Maximum authentication attempts exceeded.

wazuh medium xml

Maximum authentication attempts exceeded.

Maximum authentication attempts exceeded.

wazuh informational xml

Serv-U: Closed session

Serv-U: Closed session

wazuh informational xml

Serv-U: User logged out

Serv-U: User logged out

wazuh informational xml

VShell user successfully authenticated.

VShell user successfully authenticated.

wazuh informational xml

Serv-U: User logged in FTP/FTPS

Serv-U: User logged in FTP/FTPS

wazuh informational xml

Serv-U: User logged in SFTP (SSH)

Serv-U: User logged in SFTP (SSH)

wazuh informational xml

Serv-U: User logged in HTTP/HTTPS

Serv-U: User logged in HTTP/HTTPS

wazuh informational xml

sshd: Authentication refused due to owner/permissions of authorized_keys.

sshd: Authentication refused due to owner/permissions of authorized_keys.

wazuh informational xml

Courier logout/timeout.

Courier logout/timeout.

wazuh low xml

VShell user used the maximum number of password attempts.

VShell user used the maximum number of password attempts.

wazuh low xml

VShell user failed to login or user does not exist

VShell user failed to login or user does not exist

wazuh informational xml

Serv-U: Session timeout

Serv-U: Session timeout

wazuh informational xml

ASA: AAA (VPN) authentication successful.

ASA: AAA (VPN) authentication successful.

wazuh informational xml

pure-ftpd: FTP user logout/timeout

pure-ftpd: FTP user logout/timeout

wazuh informational xml

Imapd user logout.

Imapd user logout.

wazuh informational xml

Imapd user login.

Imapd user login.

wazuh informational xml

Fortigate: VPN User disconnected.

Fortigate: VPN User disconnected.

wazuh informational xml

Fortigate: User successfully logged into firewall interface.

Fortigate: User successfully logged into firewall interface.

wazuh informational xml

Fortigate: VPN User connected.

Fortigate: VPN User connected.

wazuh low xml

OpenVPN LDAP Bind Failure: $(ldap_data.error_message)

OpenVPN LDAP Bind Failure: $(ldap_data.error_message)

wazuh informational xml

Windows Logon Success.

Windows Logon Success.

wazuh informational xml

Windows Logon Success (ignored).

Windows Logon Success (ignored).

wazuh informational xml

IIS NetworkCleartext Logon Success

IIS NetworkCleartext Logon Success

wazuh informational xml

MS Exchange User Logoff.

MS Exchange User Logoff.