Browse Rules

Search and filter across all detection sources

62 rules

wazuh informational xml

firewalld grouping

firewalld grouping

wazuh informational xml

Courier logout/timeout.

Courier logout/timeout.

wazuh low xml

sshd: connection timed out

sshd: connection timed out

wazuh low xml

pfSense firewall drop event.

pfSense firewall drop event.

wazuh informational xml

Serv-U: Session timeout

Serv-U: Session timeout

wazuh low xml

Firewall drop event.

Firewall drop event.

wazuh informational xml

FTPD: User disconnected due to time out.

FTPD: User disconnected due to time out.

wazuh informational xml

proftpd: Remote host disconnected due to inactivity.

proftpd: Remote host disconnected due to inactivity.

wazuh informational xml

Windows: Session reconnected/disconnected to winstation.

Windows: Session reconnected/disconnected to winstation.

wazuh low xml

Fortigate: IP Sec DPD Failed.

Fortigate: IP Sec DPD Failed.

wazuh low xml

Windows Defender error event

Windows Defender error event

wazuh informational xml

proftpd: Remote host disconnected due to time out.

proftpd: Remote host disconnected due to time out.

wazuh informational xml

proftpd: Remote host disconnected due to login time out.

proftpd: Remote host disconnected due to login time out.

wazuh informational xml

pure-ftpd: FTP user logout/timeout

pure-ftpd: FTP user logout/timeout

wazuh medium xml

Netscreen firewall: policy changed.

Netscreen firewall: policy changed.

wazuh medium xml

Netscreen firewall: configuration changed.

Netscreen firewall: configuration changed.

wazuh informational xml

Windows Firewall With Advanced Security informational event

Windows Firewall With Advanced Security informational event

wazuh informational xml

Windows Firewall With Advanced Security warning event

Windows Firewall With Advanced Security warning event

wazuh medium xml

Multiple Windows Firewall With Advanced Security warning events

Multiple Windows Firewall With Advanced Security warning events

wazuh low xml

Windows Firewall With Advanced Security: Windows Defender Firewall enabled.

Windows Firewall With Advanced Security: Windows Defender Firewall enabled.

wazuh low xml

Windows Firewall With Advanced Security: Windows Defender Firewall disabled.

Windows Firewall With Advanced Security: Windows Defender Firewall disabled.

wazuh medium xml

Multiple Windows Firewall With Advanced Security error events

Multiple Windows Firewall With Advanced Security error events

wazuh low xml

Windows: User account unlocked.

Windows: User account unlocked.

wazuh medium xml

Netscreen Erase sequence started.

Netscreen Erase sequence started.

wazuh low xml

Netscaler: Firewall: DOS\DDOS error

Netscaler: Firewall: DOS\DDOS error