Browse Rules

Search and filter across all detection sources

15 rules

wazuh low xml

Windows Logon Failure.

Windows Logon Failure.

wazuh low xml

Windows DC Logon Failure.

Windows DC Logon Failure.

wazuh low xml

Windows: Logon Failure - Internal error.

Windows: Logon Failure - Internal error.

wazuh low xml

MS SQL Server Logon Failure.

MS SQL Server Logon Failure.

wazuh low xml

Windows: Logon Failure - Account's password expired.

Windows: Logon Failure - Account's password expired.

wazuh low xml

Windows: Logon Failure - Unknown user or bad password.

Windows: Logon Failure - Unknown user or bad password.

wazuh low xml

Windows: Logon Failure - User not granted logon type.

Windows: Logon Failure - User not granted logon type.

wazuh medium xml

Windows DC - Possible replay attack.

Windows DC - Possible replay attack.

wazuh low xml

Windows DC - Clock skew too great.

Windows DC - Clock skew too great.

wazuh medium xml

Windows DC integrity check on decrypted,field failed.

Windows DC integrity check on decrypted,field failed.

wazuh low xml

Windows: Logon Failure - Specified account expired.

Windows: Logon Failure - Specified account expired.

wazuh low xml

Windows: Logon Failure - User not allowed to login at this computer.

Windows: Logon Failure - User not allowed to login at this computer.

wazuh low xml

Windows: Logon Failure - Account locked out.

Windows: Logon Failure - Account locked out.

wazuh low xml

Windows: Logon Failure - Account logon time restriction violation.

Windows: Logon Failure - Account logon time restriction violation.

wazuh low xml

Windows: Logon Failure - Account currently disabled.

Windows: Logon Failure - Account currently disabled.