Skip to content

Issues: wazuh/wazuh-ruleset

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
84 Open 262 Closed
84 Open 262 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Decoder Inconsistencies - proto versus protocol
#877 by jonahseeabear was closed Apr 8, 2024
1
Writing Custom decoder for web_accesslog. #decoders
#871 by git-SwitchBlade was closed Dec 25, 2023
1
Not Receiving Agent Events on Wazuh Console
#850 by rumi-20 was closed Oct 2, 2021
Turn repository to read-only
#845 by jcruzlp was closed Sep 1, 2021
3 tasks
@jcruzlp
Problem with non working $(dstport) variable usage in rules, works if renamed bug community
#836 by deajan was closed Jul 8, 2021
@Dwordcito
2
related to Rule 18107 ignore a system user #110 community
#832 by green0tree22 was closed May 21, 2021
@juliancnn
2
Change alert levels of specific CVEs.
#830 by michaelvanderbeek was closed Apr 16, 2021
@JcabreraC
3
Powershell command alert creation threatintel Threat Intelligence
#828 by Jackson-Pollock was closed Apr 2, 2021
@72nomada
2
USB regex pattern in kernel decoder it's not covering all message logs bug community rules Rules related issues
#827 by BernaldoPenasAntelo was closed Mar 17, 2021
1
@juliancnn
1
Bump ruleset version to 4.1.2 bug qa
#826 by spothound was closed Mar 10, 2021
@spothound
sca/debian/cis_debian10.yml has a typo in rule 2551 SCA SCA policies related issues threatintel/migrate ready for a ride to wazuh/wazuh
#825 by dserializer was closed Feb 27, 2021
@72nomada
2
SSH rule set?
#824 by killmasta93 was closed Feb 21, 2021
2
New Decoder and Ruleset for CISCO FMC and FTD community help wanted
#823 by ninjadig was closed Apr 19, 2021
@jnasselle
4
Oracle monitoring - Best alternative. community
#821 by lucio2047 was closed Jan 18, 2021
@juliancnn
13
cis_rhel8_linux_rcl community question
#820 by meisamhm was closed Jan 18, 2021
@Lopuiz
2
Weekly automatic Report for specific rules id community
#819 by lucio2047 was closed Jan 12, 2021
@jnasselle
1
Custom rule for specific user logon community
#818 by lucio2047 was closed Jan 6, 2021
@juliancnn
6
Creating ruleset proxmox? community rules Rules related issues
#817 by farzadha2 was closed Jan 17, 2021
@danimegar
5
Update the README to provide information about the new location of the Wazuh ruleset enhancement
#814 by DProvinciani was closed Dec 21, 2020 Sprint 122 - Core/Bugman
1
@DProvinciani
Adding more unit tests to the rules and decoders updated during the Wazuh normalization process
#808 by pereyra-m was closed Dec 10, 2020 Sprint 121 - Core/Bugman
1
@pereyra-m
1
Add renamed rules and decoders to deprecated lists of update_ruleset
#806 by palaciosjeremias was closed Dec 3, 2020 Sprint 121 - Core/Bugman
1
@palaciosjeremias
1
MITRE: Enhancement of Command and Control mapping enhancement operations threatintel Threat Intelligence
#803 by mikykeane was closed Mar 1, 2021
18 tasks done
@JavierBejMen @Nekaze
5
Investigate about daemon names changes to Wazuh standard
#798 by TomasTurina was closed Nov 26, 2020
Update the puppet rules to make use of wazuh
#796 by DProvinciani was closed Dec 1, 2020 Sprint 121 - Core/Bugman
1
@palaciosjeremias
1
Change Wazuh daemons name from ossec-* to wazuh-*
#795 by TomasTurina was closed Nov 26, 2020
ProTip! Find all open issues with in progress development work with linked:pr.