Browse Rules

Search and filter across all detection sources

453 rules

wazuh informational xml

Docker: Node created

Docker: Node created

wazuh medium xml

Host information added.

Host information added.

wazuh informational xml

Docker: Container $(docker.Actor.Attributes.name) created

Docker: Container $(docker.Actor.Attributes.name) created

wazuh informational xml

Docker: Network $(docker.Actor.Attributes.name) created

Docker: Network $(docker.Actor.Attributes.name) created

wazuh informational xml

Docker: $(docker.Actor.Attributes.name) config created

Docker: $(docker.Actor.Attributes.name) config created

wazuh informational xml

Docker: Secret '$(docker.Actor.Attributes.name)' created

Docker: Secret '$(docker.Actor.Attributes.name)' created

wazuh informational xml

Docker: Plugin $(docker.Actor.Attributes.name) pulled

Docker: Plugin $(docker.Actor.Attributes.name) pulled

wazuh informational xml

Docker: Plugin $(docker.Actor.Attributes.name) created

Docker: Plugin $(docker.Actor.Attributes.name) created

wazuh informational xml

Docker: Service $(docker.Actor.Attributes.name) created

Docker: Service $(docker.Actor.Attributes.name) created

wazuh informational xml

Docker: Image $(docker.Actor.Attributes.name) pushed

Docker: Image $(docker.Actor.Attributes.name) pushed

wazuh informational xml

Windows User Logoff.

Windows User Logoff.

wazuh medium xml

Host information changed.

Host information changed.

wazuh informational xml

Docker: Volume created in $(docker.Actor.Attributes.driver)

Docker: Volume created in $(docker.Actor.Attributes.driver)

wazuh informational xml

Docker: Volume mounted on $(docker.Actor.Attributes.destination)

Docker: Volume mounted on $(docker.Actor.Attributes.destination)

wazuh informational xml

Docker: Image created from imported data

Docker: Image created from imported data

wazuh informational xml

racoon: VPN established.

racoon: VPN established.

wazuh informational xml

sshd: ssh connection closed.

sshd: ssh connection closed.

wazuh informational xml

sshd: ssh connection closed.

sshd: ssh connection closed.

wazuh low xml

Virtual machine being reconfigured.

Virtual machine being reconfigured.

wazuh informational xml

Imapd user logout.

Imapd user logout.

wazuh informational xml

Serv-U: Remote host connected

Serv-U: Remote host connected

wazuh informational xml

Docker: Image or repository $(docker.Actor.Attributes.name) pulled

Docker: Image or repository $(docker.Actor.Attributes.name) pulled

wazuh informational xml

Docker: Checkpoint set at container $(docker.Actor.Attributes.name)

Docker: Checkpoint set at container $(docker.Actor.Attributes.name)

wazuh informational xml

proftpd: FTP session opened.

proftpd: FTP session opened.

wazuh informational xml

Proxmox VE authentication succeeded.

Proxmox VE authentication succeeded.