Browse Rules

Search and filter across all detection sources

779 rules

wazuh informational xml

Windows audit success event.

Windows audit success event.

wazuh informational xml

Windows Audit event.

Windows Audit event.

wazuh informational xml

Windows application monitor event.

Windows application monitor event.

wazuh informational xml

McAfee Windows AV warning event.

McAfee Windows AV warning event.

wazuh low xml

McAfee Windows AV error event.

McAfee Windows AV error event.

wazuh informational xml

List of the last logged in users.

List of the last logged in users.

wazuh medium xml

Multiple Windows Defender error events

Multiple Windows Defender error events

wazuh informational xml

Docker: Node created

Docker: Node created

wazuh informational xml

Zone transfer deferred.

Zone transfer deferred.

wazuh low xml

Postfix stopped.

Postfix stopped.

wazuh low xml

PAM misconfiguration.

PAM misconfiguration.

wazuh low xml

PAM misconfiguration.

PAM misconfiguration.

wazuh informational xml

Zone has been duplicated

Zone has been duplicated

wazuh low xml

Windows audit failure event.

Windows audit failure event.

wazuh informational xml

Nginx: Incomplete client request.

Nginx: Incomplete client request.

wazuh medium xml

Postfix process error.

Postfix process error.

wazuh medium xml

Host information added.

Host information added.

wazuh low xml

Zone transfer error.

Zone transfer error.

wazuh informational xml

BIND Configuration error.

BIND Configuration error.

wazuh high xml

Zeus fatal log.

Zeus fatal log.

wazuh medium xml

Multiple Zeus warnings.

Multiple Zeus warnings.

wazuh informational xml

Ossec server started.

Ossec server started.

wazuh low xml

PostgreSQL error message.

PostgreSQL error message.

wazuh informational xml

Arpwatch: exiting.

Arpwatch: exiting.

wazuh high xml

proftpd: FTP process crashed.

proftpd: FTP process crashed.