Browse Rules

Search and filter across all detection sources

468 rules

wazuh informational xml

Courier logout/timeout.

Courier logout/timeout.

wazuh low xml

sshd: connection timed out

sshd: connection timed out

wazuh low xml

Shellshock attack attempt

Shellshock attack attempt

wazuh low xml

Shellshock attack attempt

Shellshock attack attempt

wazuh critical xml

Shellshock attack detected

Shellshock attack detected

wazuh critical xml

Shellshock attack detected

Shellshock attack detected

wazuh low xml

sshd: SSH Scanning.

sshd: SSH Scanning.

wazuh informational xml

Serv-U: Session timeout

Serv-U: Session timeout

wazuh low xml

Attack against Wordpress detected.

Attack against Wordpress detected.

wazuh medium xml

ASA: Attack in progress detected

ASA: Attack in progress detected

wazuh informational xml

FTPD: User disconnected due to time out.

FTPD: User disconnected due to time out.

wazuh informational xml

proftpd: Remote host disconnected due to inactivity.

proftpd: Remote host disconnected due to inactivity.

wazuh informational xml

Windows: Session reconnected/disconnected to winstation.

Windows: Session reconnected/disconnected to winstation.

wazuh medium xml

Multiple ASA alert messages.

Multiple ASA alert messages.

wazuh medium xml

ASA: Multiple critical messages.

ASA: Multiple critical messages.

wazuh medium xml

sendmail: Multiple pre-greetings rejects.

sendmail: Multiple pre-greetings rejects.

wazuh informational xml

proftpd: Remote host disconnected due to time out.

proftpd: Remote host disconnected due to time out.

wazuh informational xml

Active response: $(script) - $(type)

Active response: $(script) - $(type)

wazuh medium xml

ASA: Multiple error messages.

ASA: Multiple error messages.

wazuh low xml

Log permission misconfiguration in Named.

Log permission misconfiguration in Named.

wazuh low xml

sendmail: Multiple relaying attempts of spam.

sendmail: Multiple relaying attempts of spam.

wazuh medium xml

PIX: Attack in progress detected

PIX: Attack in progress detected

wazuh low xml

sshd: insecure connection attempt (scan).

sshd: insecure connection attempt (scan).

wazuh low xml

sshd: insecure connection attempt (scan).

sshd: insecure connection attempt (scan).

wazuh informational xml

proftpd: Remote host disconnected due to login time out.

proftpd: Remote host disconnected due to login time out.