Browse Rules

Search and filter across all detection sources

2,693 rules

wazuh informational xml

Grouping for the ftpd rules.

Grouping for the ftpd rules.

wazuh low xml

FTPD: connection refused.

FTPD: connection refused.

wazuh informational xml

FTPD: File created via FTP

FTPD: File created via FTP

wazuh informational xml

FTPD: File deleted via FTP

FTPD: File deleted via FTP

wazuh informational xml

FTPD: User uploaded a file to server.

FTPD: User uploaded a file to server.

wazuh informational xml

FTPD: User downloaded a file to server.

FTPD: User downloaded a file to server.

wazuh informational xml

FTPD: Remote host connected to FTP server.,

FTPD: Remote host connected to FTP server.,

wazuh low xml

FTPD: Connection blocked by Tcp Wrappers.

FTPD: Connection blocked by Tcp Wrappers.

wazuh low xml

FTPD: Reverse lookup error (bad ISP config).

FTPD: Reverse lookup error (bad ISP config).

wazuh medium xml

FTPD: Multiple FTP failed login attempts.

FTPD: Multiple FTP failed login attempts.

wazuh informational xml

FTPD: User disconnected due to time out.

FTPD: User disconnected due to time out.

wazuh medium xml

FTPD: Attempt to login with disabled account.

FTPD: Attempt to login with disabled account.

wazuh low xml

FTPD: authentication failure.

FTPD: authentication failure.

wazuh low xml

FTPD: authentication failure.

FTPD: authentication failure.

wazuh informational xml

Grouping for the proftpd rules.

Grouping for the proftpd rules.

wazuh informational xml

proftpd: FTP session opened.

proftpd: FTP session opened.

wazuh informational xml

proftpd: FTP session closed.

proftpd: FTP session closed.

wazuh low xml

proftpd: Attempt to login using a non-existent user.

proftpd: Attempt to login using a non-existent user.

wazuh low xml

proftpd: Login failed accessing the FTP server

proftpd: Login failed accessing the FTP server

wazuh informational xml

proftpd: FTP Authentication success.

proftpd: FTP Authentication success.

wazuh low xml

proftpd: Connection denied by ProFTPD configuration.

proftpd: Connection denied by ProFTPD configuration.

wazuh low xml

proftpd: Connection refused by TCP Wrappers.

proftpd: Connection refused by TCP Wrappers.

wazuh low xml

proftpd: Small PassivePorts range in config file.,Server misconfiguration.

proftpd: Small PassivePorts range in config file.,Server misconfiguration.

wazuh high xml

proftpd: Attempt to bypass firewall that can't adequately,keep state of FTP traffic.

proftpd: Attempt to bypass firewall that can't adequately,keep state of FTP traffic.

wazuh medium xml

proftpd: Multiple failed login attempts.

proftpd: Multiple failed login attempts.