Wazuh low stable xml

osquery: $(osquery.pack) $(osquery.subquery): The event executed is $(osquery.columns.name) and the publisher is $(osquery.columns.publisher)

osquery: $(osquery.pack) $(osquery.subquery): The event executed is $(osquery.columns.name) and the publisher is $(osquery.columns.publisher)

View Source

Detection Logic

Rule ID: 24022

Field Validations

Loading…

Comments (0)

Loading comments...