Search and filter across all detection sources
387 rules
Windows User Logoff.
racoon: VPN established.
sshd: ssh connection closed.
Imapd user logout.
proftpd: FTP session opened.
Proxmox VE authentication succeeded.
Imapd user login.
PIX: Successful login.
Fortigate: VPN User disconnected.
Samba connection denied.
Samba: Connection was denied.
ModSecurity: access denied.
SonicWall: Firewall administrator login.
Fortigate: VPN User connected.
OpenVPN LDAP Bind Failure: $(ldap_data.error_message)
Windows Logon Success.
Windows Logon Success (ignored).
IIS NetworkCleartext Logon Success
MS Exchange User Logoff.
PAM: Login session closed.
sshd: authentication success.
sshd: authentication success
Fortigate: User logout successful
MongoDB: Successfully authentication