Search and filter across all detection sources
23 rules
firewalld grouping
pfSense firewall drop event.
Firewall drop event.
Fortigate: IP Sec DPD Failed.
Windows Defender error event
Windows Firewall With Advanced Security informational event
Windows Firewall With Advanced Security warning event
Multiple Windows Firewall With Advanced Security warning events
Windows Firewall With Advanced Security: Windows Defender Firewall enabled.
Windows Firewall With Advanced Security: Windows Defender Firewall disabled.
Multiple Windows Firewall With Advanced Security error events
Netscreen Erase sequence started.
Netscaler: Firewall: DOS\DDOS error
Multiple pfSense firewall blocks events from same source.
Fortigate: Multiple Firewall drop events from same source.
Multiple Firewall drop events from same source.
Windows Firewall With Advanced Security: $(win.eventdata.ruleId) rule has been added to the Windows Defender Firewall exception list.
Windows Firewall With Advanced Security: $(win.eventdata.ruleId) rule has been modified in the Windows Defender Firewall exception list.
Windows Firewall With Advanced Security: $(win.eventdata.ruleId) rule has been deleted in the Windows Defender Firewall exception list.
Netscaler: Firewall violation
Netscaler: Firewall: Appsecure uthread at 0x%x had a stack error
Netscreen firewall: Multiple critical messages from,same source IP.
Netscreen firewall: Multiple alert messages from,same source IP.