Skip to content

Issues: wazuh/wazuh-ruleset

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
54 Open 82 Closed
54 Open 82 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Testing individual test files via runtests.py is broken
#599 opened Apr 7, 2020 by K-Embee
1
1
Rule using timeframe tag but without frequency
#447 opened Jul 5, 2019 by cristgl
SCA policies improvements enhancement epic SCA SCA policies related issues
#485 opened Sep 9, 2019 by chemamartinez
12 tasks
The rule 60204 is inaccurate enhancement rules Rules related issues windows
#487 opened Sep 23, 2019 by crolopez
2
Rules for Windows Active Directory enhancement operations rules Rules related issues threatintel Threat Intelligence windows
#488 opened Sep 26, 2019 by paroma96
Log examples found in 0610-win-ms_logs doesn't match bug rules Rules related issues windows
#492 opened Sep 27, 2019 by Lopuiz
Create parent decoders for CEF (Common Event Format) decoders Decoders related issues enhancement
#493 opened Sep 27, 2019 by chemamartinez
1
Improve Sysmantec Endpoint Protection (SEP) rules and decoders bug decoders Decoders related issues enhancement rules Rules related issues windows
#496 opened Sep 30, 2019 by Lopuiz
Bugs in runtest.py script bug
#498 opened Oct 4, 2019 by Lopuiz
Remove line in Rootkit _trojans.txt to stop false positives bug
#501 opened Oct 7, 2019 by markxgold
1
Rule 52502 reports false positive bug rules Rules related issues
#529 opened Nov 20, 2019 by Lopuiz
Add new case for map_standard.py script
#543 opened Jan 9, 2020 by crd1985
The rule when the user's login failed does not match in some cases bug
#228 opened Nov 2, 2018 by bah07
Add new rules and decoders for macOS sshd logs
#590 opened Mar 27, 2020 by K-Embee
Add decoders for CyberArk logs enhancement
#600 opened Apr 7, 2020 by K-Embee
1
Add new rules for Cowrie honeypot
#601 opened Apr 7, 2020 by eliasgrana
Event ID 1001 could be any number of things, not just TS auth fail
#605 opened Apr 7, 2020 by ecsc-georgew
Add support for "Windows Filtering Platform (WFP)"
#606 opened Apr 7, 2020 by K-Embee
1
Logs from api.log can't be analyzed on Wazuh
#608 opened Apr 7, 2020 by eliasgrana
Django Authentication events in Wazuh
#623 opened Apr 20, 2020 by peppelinux
Feature: macos_security ruleset community enhancement macOS macOS related issues.
#709 opened Jun 17, 2020 by hazcod
1
Improve formatting on SCA checks info SCA SCA policies related issues
#711 opened Jun 25, 2020 by Desvelao
update Create macOS policies for SCA Catalina community enhancement macOS macOS related issues. SCA SCA policies related issues
#728 opened Jul 16, 2020 by eric-holtzclaw
2
Provide decoder and rulesets for FortiGate v6 and v6.2.x community decoders Decoders related issues enhancement rules Rules related issues
#744 opened Sep 1, 2020 by yugandhar206
2
Agent event queue is flooded. Check the agent configuration.
#879 opened Apr 30, 2024 by cortera
ProTip! Add no:assignee to see everything that’s not assigned.