Skip to content

Pull requests: wazuh/wazuh-ruleset

New pull request New
22 Open 386 Closed
22 Open 386 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

rules: remove duplicate Windows Defender errorCode rules
#910 opened Jan 12, 2026 by gustavo89587 Loading…
1
Improve Sysmon rule descriptions with triage-relevant context
#909 opened Jan 11, 2026 by gustavo89587 Loading…
1
Fix broken Sysmon EventID 1 (ProcessCreate) decoders and normalize regex patterns
#908 opened Jan 11, 2026 by gustavo89587 Loading…
2
Improve syslog rule 1002 description and MITRE mapping
#907 opened Dec 23, 2025 by https-aditi Loading…
1
Improve syslog rule 1002 description and MITRE mapping
#906 opened Dec 23, 2025 by https-aditi Loading…
Fix Redis decoder timestamp
#905 opened Dec 2, 2025 by spech66 Loading…
Create 0515-fudo_decoders.xml
#897 opened Jul 20, 2025 by beyrakIn Loading…
Fix link in README
#896 opened Mar 28, 2025 by brawer Loading…
Fix error in ssd decoder when username is one or more blank spaces decoders Decoders related issues
#720 opened Jul 6, 2020 by sergiospa Contributor Loading…
@sergiospa
1
Add new Event IDs for virus/tamper matches
#718 opened Jul 2, 2020 by jjrbg Contributor Loading…
Improved IIS decoder community
#701 opened Jun 9, 2020 by danimegar Contributor Loading…
PolySwarm Integration
#698 opened Jun 4, 2020 by JavierBotella Loading…
3
[Rebase] Add rules and decoder for filezilla (Branch: 3.13-filezilla)(Issue: #216) decoders Decoders related issues rules Rules related issues
#676 opened May 22, 2020 by joselopezrio Loading…
@joselopezrio
[Rebase] Add rules and decoder for filezilla (Branch: 3.12-rebase-old-PRs) (Issue: #216) decoders Decoders related issues rules Rules related issues
#610 opened Apr 7, 2020 by eliasgrana Contributor Loading…
[Rebase] API rules and decoders (Branch: 3.12-rebase-old-PRs) (Issue: #608) decoders Decoders related issues rules Rules related issues
#609 opened Apr 7, 2020 by eliasgrana Contributor Loading…
[Rebase] Add Cowrie rules (Branch: 3.12-rebase-old-PRs) (Issue: #601) rules Rules related issues
#603 opened Apr 7, 2020 by eliasgrana Contributor Loading…
Fixes individual file tests in runtests.py bug
#602 opened Apr 7, 2020 by K-Embee Contributor Loading…
1
[Rebase] Extract dstuser nginx decoders (Branch: 3.12-rebase-old-PRs) (Issue: #597) decoders Decoders related issues
#598 opened Apr 6, 2020 by eliasgrana Contributor Loading…
[Rebase] New CyberArk rules and decoders (Branch: 3.12-rebase-old-PRs) (Issue: #600)
#596 opened Apr 6, 2020 by K-Embee Contributor Loading…
1
Upgraded Cisco IOS decoders
#140 opened May 25, 2018 by pated3pato Contributor Loading…
@migruiz4
1
Add rules for CIS AWS Benchmark (Section 3)
#131 opened May 10, 2018 by oladon Loading…
@migruiz4
7
[IMP] getawslog.py - move to boto3, logging, file in memory enhancement
#56 opened Aug 23, 2017 by mpucholblasco Loading…
1
ProTip! Exclude everything labeled bug with -label:bug.