Browse Rules

Search and filter across all detection sources

13 rules

wazuh medium xml

Microsoft Event log cleared.

Microsoft Event log cleared.
wazuh medium xml

Log file size reduced.

Log file size reduced.
wazuh informational xml

Log file rotated.

Log file rotated.
wazuh informational xml

Windows Defender: Antimalware platform restored an item from quarantine at $(win.eventdata.path)

Windows Defender: Antimalware platform restored an item from quarantine at $(win.eventdata.path)
wazuh informational xml

Windows Defender: Antimalware platform deleted an item from quarantine at $(win.eventdata.path)

Windows Defender: Antimalware platform deleted an item from quarantine at $(win.eventdata.path)
wazuh informational xml

Windows Defender: Antimalware platform deleted history of malware and other potentially unwanted software

Windows Defender: Antimalware platform deleted history of malware and other potentially unwanted software
wazuh high xml

Windows Defender: Antimalware engine found $(win.eventdata.severityName) malware or other potentially unwanted software

Windows Defender: Antimalware engine found $(win.eventdata.severityName) malware or other potentially unwanted software
wazuh low xml

Windows Defender: Antimalware platform could not restore an item from quarantine at $(win.eventdata.path)

Windows Defender: Antimalware platform could not restore an item from quarantine at $(win.eventdata.path)
wazuh low xml

Windows Defender: Antimalware platform could not delete an item from quarantine at $(win.eventdata.path)

Windows Defender: Antimalware platform could not delete an item from quarantine at $(win.eventdata.path)
wazuh low xml

Windows Defender: Antimalware platform could not delete history of malware and other potentially unwanted software

Windows Defender: Antimalware platform could not delete history of malware and other potentially unwanted software
wazuh informational xml

Windows Defender: Antimalware platform performed an action to protect your system from malware or other potentially unwanted software

Windows Defender: Antimalware platform performed an action to protect your system from malware or other potentially unwanted software
wazuh high xml

Windows Defender: Antimalware platform encountered a critical error when attempting to perform an action over the potentially unwanted software

Windows Defender: Antimalware platform encountered a critical error when attempting to perform an action over the potentially unwanted software
wazuh low xml

Windows Defender: Antimalware platform failed to perform an action to protect your system from malware or other potentially unwanted software

Windows Defender: Antimalware platform failed to perform an action to protect your system from malware or other potentially unwanted software