Browse Rules

Search and filter across all detection sources

16 rules

wazuh medium xml

sendmail: Multiple pre-greetings rejects.

sendmail: Multiple pre-greetings rejects.

wazuh low xml

sendmail: Multiple relaying attempts of spam.

sendmail: Multiple relaying attempts of spam.

wazuh low xml

mailscanner: Multiple attempts of spam.

mailscanner: Multiple attempts of spam.

wazuh medium xml

sendmail: Multiple rejected e-mails from same source ip.

sendmail: Multiple rejected e-mails from same source ip.

wazuh medium xml

ms-exchange: Multiple e-mail 500 error code (spam).

ms-exchange: Multiple e-mail 500 error code (spam).

wazuh medium xml

sendmail: Multiple attempts to send e-mail from,invalid/unknown sender.

sendmail: Multiple attempts to send e-mail from,invalid/unknown sender.

wazuh medium xml

ms-exchange: Multiple e-mail attempts to an invalid account.

ms-exchange: Multiple e-mail attempts to an invalid account.

wazuh medium xml

sendmail: Multiple attempts to send e-mail,from invalid/unknown sender domain.

sendmail: Multiple attempts to send e-mail,from invalid/unknown sender domain.

wazuh low xml

sendmail: Multiple attempts to send e-mail from a,previously rejected sender (access).

sendmail: Multiple attempts to send e-mail from a,previously rejected sender (access).

wazuh low xml

Postfix: Multiple relaying attempts of spam.

Postfix: Multiple relaying attempts of spam.

wazuh medium xml

sendmail: Sender domain has bogus MX record.,It should not be sending e-mail.

sendmail: Sender domain has bogus MX record.,It should not be sending e-mail.

wazuh high xml

Postfix: Multiple misuse of SMTP service,(bad sequence of commands).

Postfix: Multiple misuse of SMTP service,(bad sequence of commands).

wazuh low xml

Postfix: Multiple attempts to send e-mail from a,rejected sender IP (access).

Postfix: Multiple attempts to send e-mail from a,rejected sender IP (access).

wazuh medium xml

Postfix: Multiple attempts to send e-mail from,invalid/unknown sender domain.

Postfix: Multiple attempts to send e-mail from,invalid/unknown sender domain.

wazuh medium xml

Postfix: Multiple attempts to send e-mail from,black-listed IP address (blocked).

Postfix: Multiple attempts to send e-mail from,black-listed IP address (blocked).

wazuh medium xml

Postfix: Multiple attempts to send e-mail to,invalid recipient or from unknown sender domain.

Postfix: Multiple attempts to send e-mail to,invalid recipient or from unknown sender domain.