Wazuh low stable xml

osquery: $(osquery.pack) $(osquery.subquery): IOKit device $(osquery.columns.name) busy state is $(osquery.columns.busy_state)

osquery: $(osquery.pack) $(osquery.subquery): IOKit device $(osquery.columns.name) busy state is $(osquery.columns.busy_state)

View Source

Detection Logic

Rule ID: 24411

Field Validations

Loading…

Comments (0)

Loading comments...