Browse Rules

Search and filter across all detection sources

30 rules

sagan informational other

[FTPD] File created

[FTPD] File created

sagan informational other

[FTPD] File deleted

[FTPD] File deleted

sagan informational other

[GRSEC] Time set

[GRSEC] Time set

sagan informational other

[IMAPD] User logout

[IMAPD] User logout

sagan informational other

[NeXpose] Scan failed

[NeXpose] Scan failed

sagan informational other

[NeXpose] Scan paused

[NeXpose] Scan paused

sagan informational other

[NeXpose] Scan stopped

[NeXpose] Scan stopped

sagan informational other

[FTPD] Reverse lookup failure

[FTPD] Reverse lookup failure

sagan informational other

[NETSKOPE] Security Assessment alert

[NETSKOPE] Security Assessment alert

sagan informational other

[PASSWORDSTATE] Access was Granted

[PASSWORDSTATE] Access was Granted

sagan informational other

[XINETD] IMAP2 connection exit

[XINETD] IMAP2 connection exit

sagan informational other

[XINETD] POP3 connection exit

[XINETD] POP3 connection exit

sagan informational other

[XINETD] Telnet connection exit

[XINETD] Telnet connection exit

sagan informational other

[CITRIX] Netscaler - AppFw profile invoked

[CITRIX] Netscaler - AppFw profile invoked

sagan informational other

[XINETD] POP3S [SSL] connection exit

[XINETD] POP3S [SSL] connection exit

sagan informational other

[XINETD] IMAP2 connection from remote host

[XINETD] IMAP2 connection from remote host

sagan informational other

[XINETD] POP3 connection from remote host

[XINETD] POP3 connection from remote host

sagan informational other

[XINETD] Telnet connection from remote host

[XINETD] Telnet connection from remote host

sagan informational other

[CITRIX] Netscaler - AppFw built-in profile invoked

[CITRIX] Netscaler - AppFw built-in profile invoked

sagan informational other

[COURIER-BLUEDOT] Logout/disconnect from suspicious source

[COURIER-BLUEDOT] Logout/disconnect from suspicious source

sagan informational other

[COURIER-CORRELATED] Logout/disconnect after exploit attempt

[COURIER-CORRELATED] Logout/disconnect after exploit attempt

sagan informational other

[COURIER-CORRELATED] Logout/disconnect after honeypot activity

[COURIER-CORRELATED] Logout/disconnect after honeypot activity

sagan informational other

[COURIER-CORRELATED] Logout/disconnect after recon activity

[COURIER-CORRELATED] Logout/disconnect after recon activity

sagan informational other

[FTPD] User disconnected due to time out

[FTPD] User disconnected due to time out

sagan informational other

[FTPD] User downloaded a file to server

[FTPD] User downloaded a file to server