Skip to content

Issues: wazuh/wazuh-ruleset

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
93 Open 264 Closed
93 Open 264 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

correction on 0380-windows_decoders.xml, the parsing of the GET and POST methods of the IIS community decoders Decoders related issues
#688 opened May 31, 2020 by r4phl
@danimegar
14
Wazuh alert fields list community question
#762 opened Oct 10, 2020 by myasn1k
@Lopuiz
9
Dovecot Decoder Addition
#843 opened Aug 25, 2021 by sangdrax8
6
How to update Wazuh ruleset with proxy ? community enhancement
#766 opened Oct 20, 2020 by NRGLine4Sec
6
Create new rules and decoders decoders Decoders related issues enhancement rules Rules related issues
#409 opened May 27, 2019 by Lopuiz
4 of 19 tasks
@mikykeane @Lopuiz
@joselopezrio @rafamunoz98
6
Multiple failed logins correlation issue - Windows Rule 18151 decoders Decoders related issues question
#355 opened Apr 18, 2019 by RHProficio
@Lopuiz
6
Ruleset update to support new Sysmon 10 capabilities decoders Decoders related issues enhancement rules Rules related issues windows
#431 opened Jun 12, 2019 by Zenidd
4 tasks done
Sprint 106 - Core
@Lopuiz
5
Improve rules-testing decoders Decoders related issues enhancement rules Rules related issues
#352 opened Apr 16, 2019 by Lopuiz
9 of 98 tasks
25th week
@Lopuiz
4
SSH events from MacOS X don't trigger any alert. bug cicd
#348 opened Apr 11, 2019 by BraulioV 20th week
@Zenidd
4
Need to trigger Windows Logon Success rule id 18107 once(avoid multiple logs) using Logon type 3
#316 opened Mar 12, 2019 by shahmilan34
@cristgl
4
Unifi device logs match overly generic Symantec-av decoder
#840 opened Aug 17, 2021 by kmfreder1
3
Provide decoder and rulesets for FortiGate v6 and v6.2.x community decoders Decoders related issues enhancement rules Rules related issues
#744 opened Sep 1, 2020 by yugandhar206
2
update Create macOS policies for SCA Catalina community enhancement macOS macOS related issues. SCA SCA policies related issues
#728 opened Jul 16, 2020 by eric-holtzclaw
2
The rule 60204 is inaccurate enhancement rules Rules related issues windows
#487 opened Sep 23, 2019 by crolopez
2
Rule to get alert on more than one windows session of the same user?
#283 opened Feb 7, 2019 by shahmilan34
@sergiospa
2
Agent event queue is flooded. Check the agent configuration.
#879 opened Apr 30, 2024 by cortera
1
Wrong field value from checkpoint-smart1 decoder
#874 opened Feb 29, 2024 by kai-hier
1
add decoder for vpn aaa failure to cisco asa decoders
#873 opened Feb 7, 2024 by kai-hier
1
Unable to use fields srcuser and dstuser in custom rule
#868 opened Nov 8, 2023 by selivan
1
wazuh ruleset cis_centos7_linux.yml is missing rules.
#851 opened Sep 20, 2021 by RonnyMaas
1
data.win.eventdata.ipAddress ::ffff:
#842 opened Aug 24, 2021 by ozgursuder
1
False positive from RequesTracker logs community rules Rules related issues
#813 opened Dec 17, 2020 by michelep
@danimegar
1
Feature: macos_security ruleset community enhancement macOS macOS related issues.
#709 opened Jun 17, 2020 by hazcod
1
UFW (iptables) log entries aren't fully decoded community decoders Decoders related issues
#645 opened May 8, 2020 by jtyocum
@danimegar
1
Testing individual test files via runtests.py is broken
#599 opened Apr 7, 2020 by K-Embee
1
1
ProTip! Mix and match filters to narrow down what you’re looking for.