Browse Rules

Search and filter across all detection sources

4,831 rules

wazuh low xml

Replace Malicious code: Malicious code in the connection was replaced.

Replace Malicious code: Malicious code in the connection was replaced.

sagan medium other

[NETSCREEN] Malicious URL

[NETSCREEN] Malicious URL

sentinel high kql

Imperva - Malicious Client

'Detects connections from known malicious clients.'

sagan medium other

[EXTRAHOP] Malicious File Transfer

[EXTRAHOP] Malicious File Transfer

sagan medium other

[EXTRAHOP] Malicious User Agent

[EXTRAHOP] Malicious User Agent

sagan critical other

[FORTINET] Malicious Code Detected

[FORTINET] Malicious Code Detected

sagan critical other

[FORTINET] Malicious File Detected

[FORTINET] Malicious File Detected

sagan critical other

[FORTINET] Malicious File Detected

[FORTINET] Malicious File Detected

sagan medium other

[MIMECAST] Malicious File Detected

[MIMECAST] Malicious File Detected

sagan informational other

[SOPHOS] malicious behavior prevented

[SOPHOS] malicious behavior prevented

sagan informational other

[SOPHOS] Malicious traffic detected

[SOPHOS] Malicious traffic detected

sagan informational other

[SOPHOS] Malicious traffic detected

[SOPHOS] Malicious traffic detected

sentinel high kql

Apache - Known malicious user agent

'Detects known malicious user agents'

sentinel high kql

NGINX - Known malicious user agent

'Detects known malicious user agents'

sentinel high kql

Oracle - Malicious user agent

'Detects known malicious user agent strings'

sentinel high kql

Tomcat - Known malicious user agent

'Detects known malicious user agents'

sagan unknown other

[CHECKPOINT] Action Replace Malicious Code

[CHECKPOINT] Action Replace Malicious Code

sagan unknown other

[FORTISANDBOX] Malicious File Detected - CatchAll

[FORTISANDBOX] Malicious File Detected - CatchAll

sagan critical other

[BitdefenderGZ] Malicious Entity Detected (Blocked)

[BitdefenderGZ] Malicious Entity Detected (Blocked)

sagan critical other

[BitdefenderGZ] Malicious File Detected (Blocked)

[BitdefenderGZ] Malicious File Detected (Blocked)

sagan critical other

[BitdefenderGZ] Malicious Process Detected (Blocked)

[BitdefenderGZ] Malicious Process Detected (Blocked)

sagan critical other

[BOX] File marked as malicious

[BOX] File marked as malicious

sagan medium other

[CISCO-PRIME] Malicious rogue AP

[CISCO-PRIME] Malicious rogue AP

sagan critical other

[CISCO-SCA] Suspected Malicious URL

[CISCO-SCA] Suspected Malicious URL

sagan medium other

[DARKTRACE] Potential Malicious Antigena Alert

[DARKTRACE] Potential Malicious Antigena Alert