Browse Rules

Search and filter across all detection sources

344 rules

wazuh informational xml

ASA: Successful login.

ASA: Successful login.

wazuh informational xml

ASA: AAA (VPN) authentication successful.

ASA: AAA (VPN) authentication successful.

wazuh informational xml

Windows User Logoff.

Windows User Logoff.

wazuh informational xml

racoon: VPN established.

racoon: VPN established.

wazuh informational xml

sshd: ssh connection closed.

sshd: ssh connection closed.

wazuh informational xml

sshd: ssh connection closed.

sshd: ssh connection closed.

wazuh informational xml

Imapd user logout.

Imapd user logout.

wazuh informational xml

proftpd: FTP session opened.

proftpd: FTP session opened.

wazuh informational xml

Proxmox VE authentication succeeded.

Proxmox VE authentication succeeded.

wazuh informational xml

Imapd user login.

Imapd user login.

wazuh informational xml

PIX: Successful login.

PIX: Successful login.

wazuh informational xml

Fortigate: VPN User disconnected.

Fortigate: VPN User disconnected.

wazuh medium xml

ASA: Failed login attempt.

ASA: Failed login attempt.

wazuh informational xml

SonicWall: Firewall administrator login.

SonicWall: Firewall administrator login.

wazuh informational xml

Fortigate: VPN User connected.

Fortigate: VPN User connected.

wazuh low xml

OpenVPN LDAP Bind Failure: $(ldap_data.error_message)

OpenVPN LDAP Bind Failure: $(ldap_data.error_message)

wazuh informational xml

Windows Logon Success.

Windows Logon Success.

wazuh informational xml

Windows Logon Success (ignored).

Windows Logon Success (ignored).

wazuh informational xml

IIS NetworkCleartext Logon Success

IIS NetworkCleartext Logon Success

wazuh informational xml

MS Exchange User Logoff.

MS Exchange User Logoff.

wazuh informational xml

PAM: Login session closed.

PAM: Login session closed.

wazuh informational xml

sshd: authentication success.

sshd: authentication success.

wazuh low xml

ASA: AAA (VPN) authentication failed.

ASA: AAA (VPN) authentication failed.

wazuh informational xml

sshd: authentication success

sshd: authentication success

wazuh low xml

Fortigate: User logout successful

Fortigate: User logout successful