Skip to content

Issues: wazuh/wazuh-ruleset

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

91 Open 263 Closed
91 Open 263 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

dpkg decoder does not notice removal of certain packages
#890 opened Jan 3, 2025 by MIPMHannes
Oracle 19c Logs to Wazuh Server
#889 opened Dec 25, 2024 by SameenAslam
Windows SCA 'Allow Print Spooler to accept client connections' Typo
#888 opened Dec 16, 2024 by bcowman
cannot show "ALLOW" traffic events waf aws on wazuh
#887 opened Nov 15, 2024 by vidz-45
Apache rule incorrect
#886 opened Nov 11, 2024 by inf0rmix
Global Rule
#885 opened Sep 23, 2024 by KhaledEid020
postfix decoder collects "No space left on device"
#880 opened Jul 5, 2024 by kahnert
Agent event queue is flooded. Check the agent configuration.
#879 opened Apr 30, 2024 by cortera
1
Health - check rules Windows audit failure event.
#878 opened Apr 30, 2024 by cortera
0380-windows_decoders.xml issue matching spaces in dhcp log
#876 opened Mar 15, 2024 by fredtj
Feature Request: Include previous_output in Alert Description for Child Rules.
#875 opened Mar 4, 2024 by sakib789
Wrong field value from checkpoint-smart1 decoder
#874 opened Feb 29, 2024 by kai-hier
1
add decoder for vpn aaa failure to cisco asa decoders
#873 opened Feb 7, 2024 by kai-hier
1
How to import syslog raw data from file
#872 opened Jan 26, 2024 by Ondjultomte
SCA commands randomly fails
#870 opened Dec 1, 2023 by Jaz470
Customize rule usage
#869 opened Nov 28, 2023 by muddlelife
Unable to use fields srcuser and dstuser in custom rule
#868 opened Nov 8, 2023 by selivan
MacOS fails SCA is a major new OS release is available, but is otherwise patched
#867 opened Oct 4, 2023 by ChristopherSchultz
Deploy Arch Linux SCA policy
#866 opened Oct 1, 2023 by D3vil0p3r
Rocky System problems
#865 opened Sep 19, 2023 by SouthWind017
Drop or ignore alers from Debian
#864 opened Jun 11, 2023 by xaled1
Drop or ignore events from windows
#863 opened May 8, 2023 by giorgiosld
Creation of rules and decoders for Mostonet AntiVirus/Endpoint/Server Protection
#858 opened Dec 20, 2022 by mostonet
Multiple SQL injection attempts is missing defined rules
#854 opened Sep 12, 2022 by kaiwoe
wazuh ruleset cis_centos7_linux.yml is missing rules.
#851 opened Sep 20, 2021 by RonnyMaas
1
ProTip! What’s not been updated in a month: updated:<2024-12-03.