Browse Rules

Search and filter across all detection sources

60 rules

wazuh informational xml

VShell user successfully authenticated.

VShell user successfully authenticated.

wazuh informational xml

Serv-U: User logged in FTP/FTPS

Serv-U: User logged in FTP/FTPS

wazuh informational xml

Serv-U: User logged in SFTP (SSH)

Serv-U: User logged in SFTP (SSH)

wazuh informational xml

Serv-U: User logged in HTTP/HTTPS

Serv-U: User logged in HTTP/HTTPS

wazuh informational xml

ASA: AAA (VPN) authentication successful.

ASA: AAA (VPN) authentication successful.

wazuh informational xml

pure-ftpd: FTP user logout/timeout

pure-ftpd: FTP user logout/timeout

wazuh informational xml

Fortigate: User successfully logged into firewall interface.

Fortigate: User successfully logged into firewall interface.

wazuh low xml

OpenVPN LDAP Bind Failure: $(ldap_data.error_message)

OpenVPN LDAP Bind Failure: $(ldap_data.error_message)

wazuh informational xml

Windows Logon Success.

Windows Logon Success.

wazuh informational xml

Windows Logon Success (ignored).

Windows Logon Success (ignored).

wazuh informational xml

IIS NetworkCleartext Logon Success

IIS NetworkCleartext Logon Success

wazuh informational xml

MS Exchange User Logoff.

MS Exchange User Logoff.

wazuh informational xml

sshd: authentication success.

sshd: authentication success.

wazuh informational xml

sshd: authentication success

sshd: authentication success

wazuh low xml

Fortigate: User logout successful

Fortigate: User logout successful

wazuh informational xml

MongoDB: Successfully authentication

MongoDB: Successfully authentication

wazuh informational xml

Roundcube authentication succeeded.

Roundcube authentication succeeded.

wazuh informational xml

Wordpress authentication succeeded.

Wordpress authentication succeeded.

wazuh informational xml

Dovecot Authentication Success.

Dovecot Authentication Success.

wazuh informational xml

vpopmail: successful login.

vpopmail: successful login.

wazuh low xml

Fortigate: Multiple Firewall login events from same source.

Fortigate: Multiple Firewall login events from same source.

wazuh informational xml

proftpd: FTP Authentication success.

proftpd: FTP Authentication success.

wazuh informational xml

vsftpd: FTP Authentication success.

vsftpd: FTP Authentication success.

wazuh informational xml

CiscoVPN: VPN authentication successful.

CiscoVPN: VPN authentication successful.

wazuh informational xml

VMWare ESX authentication success.

VMWare ESX authentication success.