wazuh wazuh-ruleset issues

wazuh / wazuh-ruleset

Wazuh - Ruleset

https://wazuh.com

417 stars 203 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Global Rule

#885 KhaledEid020 opened 1 week ago
0
Update SECURITY.md version

#884 rauldpm closed 2 weeks ago
0
Create SECURITY.md

#883 ooniagbi closed 2 weeks ago
0
Update security policy

#882 fcaffieri closed 2 weeks ago
0
Update author e-mail address 0190-openvpn_decoders.xml

#881 juliocbc opened 1 month ago
0
postfix decoder collects "No space left on device"

#880 kahnert opened 3 months ago
0
Agent event queue is flooded. Check the agent configuration.

#879 cortera opened 5 months ago
1
Health - check rules Windows audit failure event.

#878 cortera opened 5 months ago
0
Decoder Inconsistencies - proto versus protocol

#877 jonahseeabear closed 6 months ago
1
0380-windows_decoders.xml issue matching spaces in dhcp log

#876 fredtj opened 6 months ago
0
Feature Request: Include previous_output in Alert Description for Child Rules.

#875 sakib789 opened 7 months ago
0
Wrong field value from checkpoint-smart1 decoder

#874 kai-hier opened 7 months ago
1
add decoder for vpn aaa failure to cisco asa decoders

#873 kai-hier opened 8 months ago
1
How to import syslog raw data from file

#872 Ondjultomte opened 8 months ago
0
Writing Custom decoder for web_accesslog. #decoders

#871 git-SwitchBlade closed 9 months ago
1
SCA commands randomly fails

#870 Jaz470 opened 10 months ago
0
Customize rule usage

#869 muddlelife opened 10 months ago
0
Unable to use fields srcuser and dstuser in custom rule

#868 selivan opened 11 months ago
0
MacOS fails SCA is a major new OS release is available, but is otherwise patched

#867 ChristopherSchultz opened 1 year ago
0
Deploy Arch Linux SCA policy

#866 D3vil0p3r opened 1 year ago
0
Rocky System problems

#865 SouthWind017 opened 1 year ago
0
Drop or ignore alers from Debian

#864 xaled1 opened 1 year ago
0
Drop or ignore events from windows

#863 giorgiosld opened 1 year ago
0
Update aws-eventnames

#861 lordsaibat opened 1 year ago
0
Cisco Decoder update

#860 StephenHall-ECSC opened 1 year ago
0
Creation of rules and decoders for Mostonet AntiVirus/Endpoint/Server Protection

#858 mostonet opened 1 year ago
0
Update 0310-ssh_decoders.xml

#857 rswestmoreland opened 1 year ago
0
Fix for cis 2.2.3 failing on rhel7

#856 doublez13 closed 1 year ago
0
Multiple SQL injection attempts is missing defined rules

#854 kaiwoe opened 2 years ago
0
Trying pull request

#853 mark-painagan-paidy closed 1 year ago
0
Check differences between 4.1 and 4.2 rulesets

#852 jcruzlp closed 3 years ago
1
wazuh ruleset cis_centos7_linux.yml is missing rules.

#851 RonnyMaas opened 3 years ago
1
Not Receiving Agent Events on Wazuh Console

#850 rumi-20 closed 3 years ago
0
CentOS CIS rule 4.1.6: remediation does not seem to match check

#849 jovial opened 3 years ago
0
redundancy wazuh

#848 luffy1947 opened 3 years ago
0
Add watchguard firebox support

#847 deajan closed 3 years ago
1
sshd_config CIS benchmarks checks under SCA getting failed incorrectly

#846 gobind-singh opened 3 years ago
0
Turn repository to read-only

#845 jcruzlp closed 3 years ago
0
addressing issue #843

#844 sangdrax8 closed 3 years ago
1
Dovecot Decoder Addition

#843 sangdrax8 opened 3 years ago
6
data.win.eventdata.ipAddress ::ffff:

#842 ozgursuder opened 3 years ago
1
SCA checks mapped to old CIS CSC v6

#841 orsifacundo opened 3 years ago
0
Unifi device logs match overly generic Symantec-av decoder

#840 kmfreder1 opened 3 years ago
3
AIX audit decoders & rules

#838 elwali10 opened 3 years ago
0
Enhance Cisco ASA decoders

#837 kyparisisg opened 3 years ago
0
Problem with non working $(dstport) variable usage in rules, works if renamed

#836 deajan closed 3 years ago
2
Update 0280-attack_rules.xml

#833 rom3ocrash closed 3 years ago
1
related to Rule 18107 ignore a system user #110

#832 green0tree22 closed 3 years ago
2
Removed alert_by_email option from default ruleset

#831 Nekaze closed 3 years ago
0
Change alert levels of specific CVEs.

#830 michaelvanderbeek closed 3 years ago
3