Browse Rules

Search and filter across all detection sources

342 rules

wazuh medium xml

Multiple Windows Defender error events

Multiple Windows Defender error events

wazuh informational xml

Zone transfer deferred.

Zone transfer deferred.

wazuh low xml

Postfix stopped.

Postfix stopped.

wazuh low xml

PAM misconfiguration.

PAM misconfiguration.

wazuh low xml

PAM misconfiguration.

PAM misconfiguration.

wazuh informational xml

Zone has been duplicated

Zone has been duplicated

wazuh low xml

Windows audit failure event.

Windows audit failure event.

wazuh informational xml

Nginx: Incomplete client request.

Nginx: Incomplete client request.

wazuh medium xml

Postfix process error.

Postfix process error.

wazuh low xml

Zone transfer error.

Zone transfer error.

wazuh informational xml

BIND Configuration error.

BIND Configuration error.

wazuh high xml

Zeus fatal log.

Zeus fatal log.

wazuh medium xml

Multiple Zeus warnings.

Multiple Zeus warnings.

wazuh informational xml

Ossec server started.

Ossec server started.

wazuh low xml

PostgreSQL error message.

PostgreSQL error message.

wazuh informational xml

Arpwatch: exiting.

Arpwatch: exiting.

wazuh high xml

proftpd: FTP process crashed.

proftpd: FTP process crashed.

wazuh informational xml

Zone transfer rety limit exceeded

Zone transfer rety limit exceeded

wazuh low xml

Master appears to be down.

Master appears to be down.

wazuh low xml

Unexpected Windows shutdown.

Unexpected Windows shutdown.

wazuh medium xml

Multiple Windows audit failure events.

Multiple Windows audit failure events.

wazuh low xml

Arpwatch new host detected.

Arpwatch new host detected.

wazuh low xml

DNS configuration error.

DNS configuration error.

wazuh medium xml

PIX: ARP collision detected.

PIX: ARP collision detected.

wazuh medium xml

PIX: Connection limit exceeded.

PIX: Connection limit exceeded.