Browse Rules

Search and filter across all detection sources

259 rules

wazuh low xml

Shellshock attack attempt

Shellshock attack attempt

wazuh low xml

Shellshock attack attempt

Shellshock attack attempt

wazuh critical xml

Shellshock attack detected

Shellshock attack detected

wazuh critical xml

Shellshock attack detected

Shellshock attack detected

wazuh low xml

sshd: SSH Scanning.

sshd: SSH Scanning.

wazuh low xml

Attack against Wordpress detected.

Attack against Wordpress detected.

wazuh medium xml

ASA: Attack in progress detected

ASA: Attack in progress detected

wazuh medium xml

Multiple ASA alert messages.

Multiple ASA alert messages.

wazuh medium xml

ASA: Multiple critical messages.

ASA: Multiple critical messages.

wazuh medium xml

sendmail: Multiple pre-greetings rejects.

sendmail: Multiple pre-greetings rejects.

wazuh informational xml

Active response: $(script) - $(type)

Active response: $(script) - $(type)

wazuh medium xml

ASA: Multiple error messages.

ASA: Multiple error messages.

wazuh low xml

sendmail: Multiple relaying attempts of spam.

sendmail: Multiple relaying attempts of spam.

wazuh medium xml

PIX: Attack in progress detected

PIX: Attack in progress detected

wazuh low xml

sshd: insecure connection attempt (scan).

sshd: insecure connection attempt (scan).

wazuh low xml

sshd: insecure connection attempt (scan).

sshd: insecure connection attempt (scan).

wazuh medium xml

proftpd: Multiple connection attempts from same source.

proftpd: Multiple connection attempts from same source.

wazuh low xml

sendmail: Sendmail rejected due to pre-greeting.

sendmail: Sendmail rejected due to pre-greeting.

wazuh medium xml

ASA: Multiple attack in progress messages.

ASA: Multiple attack in progress messages.

wazuh high xml

Auditd: replay attack detected

Auditd: replay attack detected

wazuh medium xml

pure-ftpd: Multiple connection attempts from same source.

pure-ftpd: Multiple connection attempts from same source.

wazuh medium xml

vsftpd: Multiple FTP connection attempts from,same source IP.

vsftpd: Multiple FTP connection attempts from,same source IP.

wazuh low xml

sshd: Reverse lookup error (bad ISP or attack).

sshd: Reverse lookup error (bad ISP or attack).

wazuh low xml

sshd: Reverse lookup error (bad ISP or attack).

sshd: Reverse lookup error (bad ISP or attack).

wazuh medium xml

sendmail: Multiple rejected e-mails from same source ip.

sendmail: Multiple rejected e-mails from same source ip.