Skip to content

Issues: wazuh/wazuh-ruleset

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
84 Open 262 Closed
84 Open 262 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

update_ruleset script name doesn't match with Wazuh 3.1.0
#93 by mpucholblasco was closed Mar 21, 2018
3
update_ruleset.py doesn't install scap_content
#89 by grant-traynor was closed Mar 8, 2018
1
New rules require JSON Decoder in 3.0.0 but not yet released bug
#88 by grant-traynor was closed Mar 21, 2018
@vikman90
9
Rule 80006 Puppet Master: not run - address in use - Level 15?
#86 by jjrbg was closed Dec 27, 2017
1
MJ12bot listed as known malicious user agent?
#84 by ghost was closed Nov 21, 2017
3
False negative for Shellshock pattern detection
#80 by ghost was closed May 14, 2018
@frgv
1
False positives with CIS benchmarks
#78 by whizoun was closed Mar 23, 2018
@SitoRBJ
1
Rule: 18107 (level 3) -> 'Windows Logon Success
#77 by keith-mo was closed Oct 13, 2017
2
Support MariaDB with rules / decoders
#76 by ghost was closed Mar 21, 2018
@frgv
2
Notes / hints to the OpenLDAP rules/decoders
#75 by ghost was closed Feb 14, 2018
1
Missing logging of REJECT/DENY iptables in 0060-firewall_rules.xml
#73 by ghost was closed Oct 2, 2017
1
sendmail-reject decoders extracting right square bracket as part of srcip field
#72 by branchnetconsulting was closed Mar 23, 2018
@SitoRBJ
1
change the rule.level when windows events are deleted wontfix
#71 by borbelyau was closed Mar 21, 2018
@BraulioV
3
All rule id Windows question
#70 by borbelyau was closed Sep 28, 2017
@vikman90
7
Rule ID error description
#69 by borbelyau was closed Apr 23, 2018
@SitoRBJ
2
New/additional postifx logs where srcip can't be extracted
#67 by ghost was closed Mar 23, 2018
@SitoRBJ
2
Debian SCAP/OVAL content
#65 by hex2a was closed Oct 31, 2017
@erseco
3
sshd rule: Bad protocol version identification missing srcip
#61 by ghost was closed Sep 2, 2017
1
False positive on "Trojaned version of file '/bin/grep' detected."
#60 by ghost was closed Sep 2, 2017
3
Possible missing "ovpn-server" program name in OpenVPN decoder
#59 by ghost was closed Sep 2, 2017
Additional / new logfile pattern for failed roundcube logins
#57 by ghost was closed Nov 21, 2017
5
GPG13 enhancement
#54 by rossengeorgiev was closed Mar 21, 2018
3
USB rules for linux
#53 by rossengeorgiev was closed Mar 23, 2018
@SitoRBJ
3
windows decoders won't pick correct account name for account lockout messages enhancement
#52 by rossengeorgiev was closed Aug 8, 2017
8
Fortinet Decoders doesn't work properly if log comes from FortiAnalyzer.
#50 by phpsystems was closed Jul 10, 2017
3
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.