Browse Rules

Search and filter across all detection sources

550 rules

wazuh informational xml

Puppet Master messages grouped.

Puppet Master messages grouped.
wazuh informational xml

Puppet Master: Info

Puppet Master: Info
wazuh informational xml

Puppet Master: Deprecated

Puppet Master: Deprecated
wazuh informational xml

Puppet Master: Certificate issue

Puppet Master: Certificate issue
wazuh low xml

Puppet Master started

Puppet Master started
wazuh low xml

Puppet Master stopped

Puppet Master stopped
wazuh informational xml

Master is not authoritative for zone.

Master is not authoritative for zone.
sagan medium other

[BIND] Refused notify from non-master

[BIND] Refused notify from non-master
sagan low other

[MONGODB] Cannot authenticate to master server

[MONGODB] Cannot authenticate to master server
wazuh low xml

Puppet Master: Error

Puppet Master: Error
sagan informational other

[CyberArk] Changes to the Master Policy failed

[CyberArk] Changes to the Master Policy failed
wazuh informational xml

Zone has been removed from a master server

Zone has been removed from a master server
wazuh informational xml

Cannot refresh a domain from the master server.

Cannot refresh a domain from the master server.
wazuh informational xml

The master browser has received a server announcement

The master browser has received a server announcement
wazuh low xml

Puppet Master: Manifest Error

Puppet Master: Manifest Error
wazuh low xml

The browser has received a server announcement indicating that the computer is a master browser, but this computer is not a master browser

The browser has received a server announcement indicating that the computer is a master browser, but this computer is not a master browser
sagan unknown other

[BIND] Serial number from master is lower than stored

[BIND] Serial number from master is lower than stored
sigma medium sigma

AWS RDS Master Password Change

Detects the change of database master password. It may be a part of data exfiltration.
signature-base unknown yara

CN_Honker_Master_beta_1_7 [yara]

Sample from CN Honker Pentest Toolset - file Master_beta_1.7.exe
wazuh low xml

The browser was unable to promote itself to master browser

The browser was unable to promote itself to master browser
wazuh low xml

The browser was unable to promote itself to master browser

The browser was unable to promote itself to master browser
wazuh low xml

Puppet Master: Permission denied

Puppet Master: Permission denied
wazuh medium xml

Serial number from master is lower,than stored.

Serial number from master is lower,than stored.
yara unknown yara

Pack_Master_v10 [packers]
wazuh low xml

Puppet Master: not run - address in use

Puppet Master: not run - address in use