Browse Rules

Search and filter across all detection sources

26 rules

wazuh informational xml

MS-DHCP: The log was started.

MS-DHCP: The log was started.

wazuh informational xml

MS-DHCP: The log was stopped.

MS-DHCP: The log was stopped.

wazuh informational xml

Ossec agent started.

Ossec agent started.

wazuh informational xml

Ossec agent disconnected.

Ossec agent disconnected.

wazuh informational xml

Ossec agent removed.

Ossec agent removed.

wazuh medium xml

MS-DHCP: The log was temporarily paused due to low disk space.

MS-DHCP: The log was temporarily paused due to low disk space.

wazuh medium xml

MS-DHCP: Audit log paused.

MS-DHCP: Audit log paused.

wazuh low xml

McAfee Windows AV - Virus scan cancelled

McAfee Windows AV - Virus scan cancelled

wazuh low xml

McAfee Windows AV - Virus scan cancelled.

McAfee Windows AV - Virus scan cancelled.

wazuh low xml

Windows Defender: Antimalware platform will expire soon

Windows Defender: Antimalware platform will expire soon

wazuh informational xml

McAfee Windows AV - Scan started or stopped

McAfee Windows AV - Scan started or stopped

wazuh informational xml

McAfee Windows AV - Scan started or stopped.

McAfee Windows AV - Scan started or stopped.

wazuh informational xml

Windows Defender: Antivirus real-time protection is enabled

Windows Defender: Antivirus real-time protection is enabled

wazuh low xml

Windows Defender: Antivirus real-time protection is disabled

Windows Defender: Antivirus real-time protection is disabled

wazuh informational xml

Windows Defender: Antivirus scanning for viruses is enabled

Windows Defender: Antivirus scanning for viruses is enabled

wazuh medium xml

Windows Defender: Antivirus scanning for viruses is disabled

Windows Defender: Antivirus scanning for viruses is disabled

wazuh informational xml

McAfee Windows AV - Scan completed with no viruses found

McAfee Windows AV - Scan completed with no viruses found

wazuh low xml

McAfee Windows AV - Virus scan cancelled due to shutdown

McAfee Windows AV - Virus scan cancelled due to shutdown

wazuh informational xml

McAfee Windows AV - Scan completed with no viruses found.

McAfee Windows AV - Scan completed with no viruses found.

wazuh low xml

McAfee Windows AV - Virus scan cancelled due to shutdown.

McAfee Windows AV - Virus scan cancelled due to shutdown.

wazuh low xml

Windows Defender: Antimalware platform feature configuration changed

Windows Defender: Antimalware platform feature configuration changed

wazuh medium xml

Windows Defender: Antimalware platform is expired due to error $(win.eventdata.errorCode)

Windows Defender: Antimalware platform is expired due to error $(win.eventdata.errorCode)

wazuh informational xml

Windows Defender: Antivirus real-time protection feature configuration has changed

Windows Defender: Antivirus real-time protection feature configuration has changed

wazuh informational xml

Windows Defender: Antivirus scanning for malware and other potentially unwanted software is enabled

Windows Defender: Antivirus scanning for malware and other potentially unwanted software is enabled

wazuh medium xml

Windows Defender: Antivirus scanning for malware and other potentially unwanted software is disabled

Windows Defender: Antivirus scanning for malware and other potentially unwanted software is disabled