Issues
- 1
- 0
postfix decoder collects "No space left on device"
#880 opened by kahnert - 0
Health - check rules Windows audit failure event.
#878 opened by cortera - 1
Decoder Inconsistencies - proto versus protocol
#877 opened by jonahseeabear - 1
- 0
- 0
Feature Request: Include previous_output in Alert Description for Child Rules.
#875 opened by sakib789 - 1
Wrong field value from checkpoint-smart1 decoder
#874 opened by kai-hier - 0
How to import syslog raw data from file
#872 opened by Ondjultomte - 1
- 0
SCA commands randomly fails
#870 opened by Jaz470 - 0
Customize rule usage
#869 opened by muddlelife - 0
- 0
MacOS fails SCA is a major new OS release is available, but is otherwise patched
#867 opened by ChristopherSchultz - 0
Deploy Arch Linux SCA policy
#866 opened by D3vil0p3r - 0
Rocky System problems
#865 opened by SouthWind017 - 3
- 0
Drop or ignore alers from Debian
#864 opened by xaled1 - 0
Drop or ignore events from windows
#863 opened by giorgiosld - 0
Creation of rules and decoders for Mostonet AntiVirus/Endpoint/Server Protection
#858 opened by mostonet - 0
- 0
redundancy wazuh
#848 opened by luffy1947 - 0
Not Receiving Agent Events on Wazuh Console
#850 opened by rumi-20 - 1
- 0
- 0
- 0
Turn repository to read-only
#845 opened by jcruzlp - 1
data.win.eventdata.ipAddress ::ffff:
#842 opened by ozgursuder - 6
Dovecot Decoder Addition
#843 opened by sangdrax8 - 0
SCA checks mapped to old CIS CSC v6
#841 opened by orsifacundo - 0
AIX audit decoders & rules
#838 opened by elwali10 - 0
Enhance Cisco ASA decoders
#837 opened by kyparisisg - 2
- 2
related to Rule 18107 ignore a system user #110
#832 opened by green0tree22 - 4
New Decoder and Ruleset for CISCO FMC and FTD
#823 opened by ninjadig - 3
Change alert levels of specific CVEs.
#830 opened by michaelvanderbeek - 0
Clever Alerts
#829 opened by n00bsteam - 2
Powershell command alert creation
#828 opened by Jackson-Pollock - 1
USB regex pattern in kernel decoder it's not covering all message logs
#827 opened by BernaldoPenasAntelo - 0
Bump ruleset version to 4.1.2
#826 opened by spothound - 2
- 2
SSH rule set?
#824 opened by killmasta93 - 13
Oracle monitoring - Best alternative.
#821 opened by lucio2047 - 2
cis_rhel8_linux_rcl
#820 opened by meisamhm - 5
Creating ruleset proxmox?
#817 opened by farzadha2 - 1
Weekly automatic Report for specific rules id
#819 opened by lucio2047 - 6
Custom rule for specific user logon
#818 opened by lucio2047 - 1
False positive from RequesTracker logs
#813 opened by michelep - 0
Update the README to provide information about the new location of the Wazuh ruleset
#814 opened by DProvinciani - 1
Adding more unit tests to the rules and decoders updated during the Wazuh normalization process
#808 opened by pereyra-m