-
Notifications
You must be signed in to change notification settings - Fork 229
Pull requests: wazuh/wazuh-ruleset
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
rules: remove duplicate Windows Defender errorCode rules
#910
opened Jan 12, 2026 by
gustavo89587
Loading…
Improve Sysmon rule descriptions with triage-relevant context
#909
opened Jan 11, 2026 by
gustavo89587
Loading…
Fix broken Sysmon EventID 1 (ProcessCreate) decoders and normalize regex patterns
#908
opened Jan 11, 2026 by
gustavo89587
Loading…
Improve syslog rule 1002 description and MITRE mapping
#907
opened Dec 23, 2025 by
https-aditi
Loading…
Improve syslog rule 1002 description and MITRE mapping
#906
opened Dec 23, 2025 by
https-aditi
Loading…
Fix error in ssd decoder when username is one or more blank spaces
decoders
Decoders related issues
#720
opened Jul 6, 2020 by
sergiospa
Contributor
Loading…
[Rebase] Add rules and decoder for filezilla (Branch: 3.13-filezilla)(Issue: #216)
decoders
Decoders related issues
rules
Rules related issues
#676
opened May 22, 2020 by
joselopezrio
Loading…
[Rebase] Add rules and decoder for filezilla (Branch: 3.12-rebase-old-PRs) (Issue: #216)
decoders
Decoders related issues
rules
Rules related issues
#610
opened Apr 7, 2020 by
eliasgrana
Contributor
Loading…
[Rebase] API rules and decoders (Branch: 3.12-rebase-old-PRs) (Issue: #608)
decoders
Decoders related issues
rules
Rules related issues
#609
opened Apr 7, 2020 by
eliasgrana
Contributor
Loading…
[Rebase] Add Cowrie rules (Branch: 3.12-rebase-old-PRs) (Issue: #601)
rules
Rules related issues
#603
opened Apr 7, 2020 by
eliasgrana
Contributor
Loading…
Fixes individual file tests in runtests.py
bug
#602
opened Apr 7, 2020 by
K-Embee
Contributor
Loading…
[Rebase] Extract dstuser nginx decoders (Branch: 3.12-rebase-old-PRs) (Issue: #597)
decoders
Decoders related issues
#598
opened Apr 6, 2020 by
eliasgrana
Contributor
Loading…
[Rebase] New CyberArk rules and decoders (Branch: 3.12-rebase-old-PRs) (Issue: #600)
#596
opened Apr 6, 2020 by
K-Embee
Contributor
Loading…
[IMP] getawslog.py - move to boto3, logging, file in memory
enhancement
#56
opened Aug 23, 2017 by
mpucholblasco
Loading…
ProTip!
Exclude everything labeled
bug with -label:bug.