Wazuh low stable xml

osquery: $(osquery.pack) $(osquery.subquery): The pack executed is $(osquery.columns.name) and the interval is $(osquery.columns.interval)

osquery: $(osquery.pack) $(osquery.subquery): The pack executed is $(osquery.columns.name) and the interval is $(osquery.columns.interval)

View Source

Detection Logic

Rule ID: 24021

Field Validations

Loading…

Comments (0)

Loading comments...