-
Notifications
You must be signed in to change notification settings - Fork 201
Issues: wazuh/wazuh-ruleset
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Author
Label
Projects
Milestones
Assignee
Sort
Issues list
Add Decoder support for Windows sysmon event ID 9 - 15
enhancement
#29
by xkilian
was closed Mar 21, 2018
Guide for own rules and decoders missing - OSSEC vs WAZUH feature set
#34
by VAdamec
was closed Apr 7, 2017
update_ruleset.py doesn't have a silent option to use with cron
#36
by Jinkxed
was closed Apr 17, 2017
sudo rule doesn't handle users other than root
enhancement
#46
by rossengeorgiev
was closed Aug 22, 2019
Fortinet Decoders doesn't work properly if log comes from FortiAnalyzer.
#50
by phpsystems
was closed Jul 10, 2017
windows decoders won't pick correct account name for account lockout messages
enhancement
#52
by rossengeorgiev
was closed Aug 8, 2017
False positive on "Trojaned version of file '/bin/grep' detected."
#60
by ghost
was closed Sep 2, 2017
change the rule.level when windows events are deleted
wontfix
#71
by borbelyau
was closed Mar 21, 2018
Previous Next
ProTip!
Exclude everything labeled
bug
with -label:bug.