Skip to content

Issues: wazuh/wazuh-ruleset

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
93 Open 264 Closed
93 Open 264 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Improve sshd decoding decoders Decoders related issues enhancement
#367 opened Apr 30, 2019 by Lopuiz
@Lopuiz
Error message trying update ruleset
#215 opened Oct 15, 2018 by adri9valle
@Lopuiz
Filezilla decoders/rules
#216 opened Oct 16, 2018 by jesuslinares
@Lopuiz
Scan for loaded RootKit Kernel Modules community decoders Decoders related issues enhancement rules Rules related issues
#227 opened Nov 1, 2018 by juergenc
@Lopuiz
1
The rule when the user's login failed does not match in some cases bug
#228 opened Nov 2, 2018 by bah07
[Feature request] Automating update of scap_content enhancement operations threatintel Threat Intelligence
#250 opened Jan 3, 2019 by jctello
@72nomada
1
Rule to get alert on more than one windows session of the same user?
#283 opened Feb 7, 2019 by shahmilan34
@sergiospa
2
Need to trigger Windows Logon Success rule id 18107 once(avoid multiple logs) using Logon type 3
#316 opened Mar 12, 2019 by shahmilan34
@cristgl
4
Add PowerShell rules for eventchannel
#335 opened Mar 26, 2019 by cristgl
@cristgl
1
SSH events from MacOS X don't trigger any alert. bug cicd
#348 opened Apr 11, 2019 by BraulioV 20th week
@Zenidd
4
Improve rules-testing decoders Decoders related issues enhancement rules Rules related issues
#352 opened Apr 16, 2019 by Lopuiz
9 of 98 tasks
25th week
@Lopuiz
4
Multiple failed logins correlation issue - Windows Rule 18151 decoders Decoders related issues question
#355 opened Apr 18, 2019 by RHProficio
@Lopuiz
6
Unexpected version message is confusing
#135 opened May 17, 2018 by mgmacias95
@Lopuiz
nginx-access-logs with spaces in URL is not parsed decoders Decoders related issues enhancement
#356 opened Apr 24, 2019 by MagnusMWW
@Lopuiz @paroma96
1
Cisco logs match syslog rules bug rules Rules related issues
#379 opened May 6, 2019 by Lopuiz
1
@Lopuiz
1
Binary "update_ruleset" misbehaviour when canceling the update. enhancement
#390 opened May 8, 2019 by jm404
Create new rules and decoders decoders Decoders related issues enhancement rules Rules related issues
#409 opened May 27, 2019 by Lopuiz
4 of 19 tasks
@mikykeane @Lopuiz
@joselopezrio @rafamunoz98
6
Ruleset update to support new Sysmon 10 capabilities decoders Decoders related issues enhancement rules Rules related issues windows
#431 opened Jun 12, 2019 by Zenidd
4 tasks done
Sprint 106 - Core
@Lopuiz
5
Rule using timeframe tag but without frequency
#447 opened Jul 5, 2019 by cristgl
Adapt CIS-CAT rules according to the JSON decode fields refactor bug rules Rules related issues
#452 opened Jul 18, 2019 by daescar
@daescar
Missing 'forwardedfor' ip field on new Fortigate 5.6+ decoder/rules community decoders Decoders related issues
#473 opened Aug 13, 2019 by Zekah
@Lopuiz
1
[Decoders] Web access decoder is not working as expected with some logs decoders Decoders related issues enhancement operations threatintel Threat Intelligence
#480 opened Aug 23, 2019 by paroma96
@72nomada
Conflict with decoders decoders Decoders related issues
#483 opened Sep 3, 2019 by joselopezrio
@joselopezrio
SCA policies improvements enhancement epic SCA SCA policies related issues
#485 opened Sep 9, 2019 by chemamartinez
12 tasks
Decoder 0190-openvpn_decoders.xml don,t work with "[ ]".
#892 opened Feb 5, 2025 by rschossler
ProTip! Follow long discussions with comments:>50.