Skip to content

Pull requests: wazuh/wazuh-ruleset

New pull request New
60 Open 458 Closed
60 Open 458 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

rules: remove duplicate Windows Defender errorCode rules
#910 opened Jan 12, 2026 by gustavo89587 Loading…
Improve Sysmon rule descriptions with triage-relevant context
#909 opened Jan 11, 2026 by gustavo89587 Loading…
Fix broken Sysmon EventID 1 (ProcessCreate) decoders and normalize regex patterns
#908 opened Jan 11, 2026 by gustavo89587 Loading…
1
Improve syslog rule 1002 description and MITRE mapping
#907 opened Dec 23, 2025 by https-aditi Loading…
1
Improve syslog rule 1002 description and MITRE mapping
#906 opened Dec 23, 2025 by https-aditi Loading…
Fix Redis decoder timestamp
#905 opened Dec 2, 2025 by spech66 Loading…
Create 0515-fudo_decoders.xml
#897 opened Jul 20, 2025 by beyrakIn Loading…
Fix link in README
#896 opened Mar 28, 2025 by brawer Loading…
Update author e-mail address 0190-openvpn_decoders.xml
#881 opened Sep 1, 2024 by juliocbc Loading…
3
Update aws-eventnames
#861 opened Feb 24, 2023 by lordsaibat Loading…
Cisco Decoder update
#860 opened Feb 9, 2023 by StephenHall-ECSC Loading…
Update 0310-ssh_decoders.xml
#857 opened Dec 13, 2022 by rswestmoreland Loading…
Fix NextCloud bruteforce detection
#770 opened Oct 27, 2020 by kravietz Loading…
@jcruzlp
Add decoders to extract the username field from failed login logs of proftpd
#740 opened Aug 6, 2020 by NitroCao Loading…
Fix error in ssd decoder when username is one or more blank spaces decoders Decoders related issues
#720 opened Jul 6, 2020 by sergiospa Loading…
@sergiospa
1
Add new Event IDs for virus/tamper matches
#718 opened Jul 2, 2020 by jjrbg Loading…
Improved IIS decoder community
#701 opened Jun 9, 2020 by danimegar Loading…
PolySwarm Integration
#698 opened Jun 4, 2020 by JavierBotella Loading…
3
[Rebase] Add rules and decoder for filezilla (Branch: 3.13-filezilla)(Issue: #216) decoders Decoders related issues rules Rules related issues
#676 opened May 22, 2020 by joselopezrio Loading…
@joselopezrio
3.13 api rules
#675 opened May 22, 2020 by odintree Loading…
1
Add decoder for UFW logs community
#649 opened May 12, 2020 by danimegar Loading…
Added more rules related to Windows Eventlog community
#640 opened May 6, 2020 by danimegar Loading…
Adding a decoder for if Exim doesn't pass a user
#627 opened Apr 29, 2020 by JGRFenix Loading…
[Rebase] Add rules and decoder for filezilla (Branch: 3.12-rebase-old-PRs) (Issue: #216) decoders Decoders related issues rules Rules related issues
#610 opened Apr 7, 2020 by eliasgrana Loading…
[Rebase] API rules and decoders (Branch: 3.12-rebase-old-PRs) (Issue: #608) decoders Decoders related issues rules Rules related issues
#609 opened Apr 7, 2020 by eliasgrana Loading…
ProTip! Add no:assignee to see everything that’s not assigned.