Browse Rules

Search and filter across all detection sources

13 rules

wazuh medium xml

ASA: AAA (VPN) user locked out.

ASA: AAA (VPN) user locked out.

wazuh medium xml

Windows: User account locked out (multiple login errors).

Windows: User account locked out (multiple login errors).

wazuh medium xml

PIX: AAA (VPN) user locked out.

PIX: AAA (VPN) user locked out.

wazuh low xml

Windows: Logon Failure - Account's password expired.

Windows: Logon Failure - Account's password expired.

wazuh low xml

Windows: Logon Failure - User not granted logon type.

Windows: Logon Failure - User not granted logon type.

wazuh low xml

Auditd: limit of failed login attempts reached.

Auditd: limit of failed login attempts reached.

wazuh low xml

Windows: Logon Failure - Specified account expired.

Windows: Logon Failure - Specified account expired.

wazuh low xml

Windows: Logon Failure - User not allowed to login at this computer.

Windows: Logon Failure - User not allowed to login at this computer.

wazuh low xml

Windows: Logon Failure - Account locked out.

Windows: Logon Failure - Account locked out.

wazuh low xml

Auditd: login attempt from a forbidden location.

Auditd: login attempt from a forbidden location.

wazuh low xml

Windows: Logon Failure - Account currently disabled.

Windows: Logon Failure - Account currently disabled.

wazuh low xml

Auditd: login attempt reached the maximum amount of concurrent sessions.

Auditd: login attempt reached the maximum amount of concurrent sessions.

wazuh low xml

Auditd: login attempt is made at a time when it is prevented by.

Auditd: login attempt is made at a time when it is prevented by.