Browse Rules

Search and filter across all detection sources

60 rules

wazuh medium xml

Multiple System error events

Multiple System error events

wazuh low xml

Windows System error event

Windows System error event

sagan low other

[SentinelOne] Kill failed

[SentinelOne] Kill failed

sagan low other

[SentinelOne] Quarantine failed

[SentinelOne] Quarantine failed

sagan low other

[SYSTEMD] Service Failed

[SYSTEMD] Service Failed

wazuh low xml

An attempt to open the file for read only access failed with system error

An attempt to open the file for read only access failed with system error

sagan low other

[CISCO-SECUREENDPOINT] Quarantine Failure

[CISCO-SECUREENDPOINT] Quarantine Failure

sagan low other

[SYSTEMD] Sagan Config Failure

[SYSTEMD] Sagan Config Failure

sagan low other

[SYSTEMD] SERVICE_START Failure

[SYSTEMD] SERVICE_START Failure

sagan low other

[CISCO-SECUREENDPOINT] Critical Fault Raised

[CISCO-SECUREENDPOINT] Critical Fault Raised

sagan low other

[CISCO-SECUREENDPOINT] Major Fault Raised

[CISCO-SECUREENDPOINT] Major Fault Raised

sagan low other

[FORTINET] IPS Session Scan Paused

[FORTINET] IPS Session Scan Paused

sagan low other

[FORTINET] IPS Session Scan Paused

[FORTINET] IPS Session Scan Paused

sagan low other

[MS-DEFENDER] Antimalware Scan Failed

[MS-DEFENDER] Antimalware Scan Failed

sagan low other

[MS-DEFENDER] Platform Update Failed

[MS-DEFENDER] Platform Update Failed

sagan low other

[SYSTEMD] Service Failed to Start

[SYSTEMD] Service Failed to Start

sagan low other

[WINDOWS-MISC] File system full

[WINDOWS-MISC] File system full

sagan low other

[WINDOWS-MISC] File system full

[WINDOWS-MISC] File system full

sagan low other

[CISCO-PIXASA] Internal error in function

[CISCO-PIXASA] Internal error in function

sagan low other

[MS-DEFENDER] Antimalware Engine Update Failed

[MS-DEFENDER] Antimalware Engine Update Failed

sagan low other

[MS-DEFENDER] Security Intelligence Update Failed

[MS-DEFENDER] Security Intelligence Update Failed

sagan low other

[CISCO-SECUREENDPOINT] Cloud Recall Quarantine Attempt Failed

[CISCO-SECUREENDPOINT] Cloud Recall Quarantine Attempt Failed

wazuh low xml

Windows error event.

Windows error event.

wazuh low xml

Web server 500 error code (Internal Error).

Web server 500 error code (Internal Error).

wazuh low xml

Windows error event

Windows error event