User contributions
From Atomicorp Wiki
(Latest | Earliest) View (newer 50 | older 50) (20 | 50 | 100 | 250 | 500)
- 10:16, 22 October 2020 (diff | hist) . . (+812) . . N HIDS 19004 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = CIS Compliance event }} = Description = CIS Benchmark has scored less than 5...") (top)
- 10:10, 22 October 2020 (diff | hist) . . (+813) . . N HIDS 59233 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = User account unlocked. == W...") (top)
- 10:09, 22 October 2020 (diff | hist) . . (+949) . . N HIDS 60059 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Atomicorp Threat Intel event }} = Description = The source IP address was de...") (top)
- 10:05, 22 October 2020 (diff | hist) . . (+1,430) . . N HIDS 18301 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = Windows has failed to write t...") (top)
- 10:03, 22 October 2020 (diff | hist) . . (+770) . . N HIDS 501 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = An OSSEC agent has started. ...") (top)
- 10:02, 22 October 2020 (diff | hist) . . (+740) . . N HIDS 80705 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Auditd event }} = Description = Auditd configuration has changed. == What ...") (top)
- 10:00, 22 October 2020 (diff | hist) . . (+863) . . N HIDS 59252 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = Security Enabled Universal Group Memb...") (top)
- 09:57, 22 October 2020 (diff | hist) . . (+999) . . N HIDS 60790 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = This indicates that the reigs...") (top)
- 09:54, 22 October 2020 (diff | hist) . . (+816) . . N HIDS 59250 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = Security Enabled Universal Group Chan...") (top)
- 09:53, 22 October 2020 (diff | hist) . . (+830) . . N HIDS 59251 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = Security Enabled Universal Group Memb...") (top)
- 09:51, 22 October 2020 (diff | hist) . . (-694) . . HIDS 83200 (top)
- 09:49, 22 October 2020 (diff | hist) . . (+1,430) . . N HIDS 83200 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = Windows has failed to properl...")
- 09:46, 22 October 2020 (diff | hist) . . (+928) . . N HIDS 11 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = OSSEC event }} = Description = This is an internal OSSEC anomaly detection e...") (top)
- 09:39, 22 October 2020 (diff | hist) . . (+986) . . N HIDS 40703 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Systemd event }} = Description = Systemd has detected that a service is in a...") (top)
- 09:37, 22 October 2020 (diff | hist) . . (+879) . . N HIDS 81543 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = OpenSCAP event }} = Description = OpenSCAP Report overview: Score is less th...") (top)
- 09:34, 22 October 2020 (diff | hist) . . (+833) . . N HIDS 19015 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = CIS Compliance event }} = Description = Status has changed from 'not applica...") (top)
- 09:32, 22 October 2020 (diff | hist) . . (+965) . . N HIDS 59207 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = This indicates that the specified use...") (top)
- 13:45, 21 October 2020 (diff | hist) . . (+773) . . N HIDS 19012 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = CIS Compliance event }} = Description = CIS Compliance benchmark for this se...") (top)
- 13:42, 21 October 2020 (diff | hist) . . (+746) . . N HIDS 7501 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Mcafee event }} = Description = Mcafee Informational level event. == What...") (top)
- 13:39, 21 October 2020 (diff | hist) . . (+820) . . N HIDS 533 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = OSSEC event }} = Description = OSSEC Rootkit detection has detected a servic...") (top)
- 13:37, 21 October 2020 (diff | hist) . . (+753) . . N HIDS 81531 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = OpenSCAP event }} = Description = OpenSCAP has indicated that the compliance ...") (top)
- 13:35, 21 October 2020 (diff | hist) . . (+673) . . N HIDS 81522 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = OpenSCAP event }} = Description = Informational message indicating the setti...") (top)
- 13:33, 21 October 2020 (diff | hist) . . (+907) . . N HIDS 514 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = Rootcheck has detected an app...") (top)
- 13:30, 21 October 2020 (diff | hist) . . (+647) . . N HIDS 502 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = OSSEC event }} = Description = OSSEC Server Service has been restarted == Wh...") (top)
- 13:29, 21 October 2020 (diff | hist) . . (+664) . . N HIDS 5715 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = SSH event }} = Description = A successful SSH login has been detected == Wha...") (top)
- 13:27, 21 October 2020 (diff | hist) . . (+653) . . N HIDS 52506 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Clamav event }} = Description = The Clam-AV malware database has been update...") (top)
- 13:25, 21 October 2020 (diff | hist) . . (+1,414) . . N HIDS 59306 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = Composite rule for multiple w...") (top)
- 13:22, 21 October 2020 (diff | hist) . . (+675) . . N HIDS 506 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = OSSEC Audit event }} = Description = Indicates that the OSSEC client.keys fi...") (top)
- 13:21, 21 October 2020 (diff | hist) . . (+1,010) . . N HIDS 60602 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = This is a generic catchall for Window...") (top)
- 13:15, 21 October 2020 (diff | hist) . . (+989) . . N HIDS 80730 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = SELinux event }} = Description = SELinux has logged a permissions violation...") (top)
- 13:12, 21 October 2020 (diff | hist) . . (+1,091) . . N HIDS 60608 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows error event }} = Description = This is a summary event from the win...") (top)
- 13:07, 21 October 2020 (diff | hist) . . (+1,003) . . N HIDS 59247 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = A local security group has been been...") (top)
- 13:03, 21 October 2020 (diff | hist) . . (+898) . . N HIDS 5108 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Linux System Event }} = Description = The Linux kernel has indicated that th...") (top)
- 13:01, 21 October 2020 (diff | hist) . . (+1,491) . . N HIDS 18153 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = This is a composite rule, 10 ...") (top)
- 12:59, 21 October 2020 (diff | hist) . . (+1,026) . . N HIDS 60642 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = This event indicates that the Softwar...") (top)
- 12:54, 21 October 2020 (diff | hist) . . (+1,204) . . N HIDS 60702 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = This indicates that the VSS s...") (top)
- 12:49, 21 October 2020 (diff | hist) . . (+1,880) . . N HIDS 59335 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = Windows threat protection has indica...") (top)
- 12:44, 21 October 2020 (diff | hist) . . (+1,021) . . N HIDS 61138 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = A new windows service has been added...") (top)
- 12:39, 21 October 2020 (diff | hist) . . (+721) . . N HIDS 81101 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = USB Auditing rule }} = Description = A new USB device has been attached to t...") (top)
- 12:37, 21 October 2020 (diff | hist) . . (+782) . . N HIDS 593 (Created page with " {{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Ossec event log }} = Description = This indicates that the OSSEC event log ...") (top)
- 12:34, 21 October 2020 (diff | hist) . . (+1,151) . . N HIDS 61060 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows performance library }} = Description = This indicates that the windo...") (top)
- 12:28, 21 October 2020 (diff | hist) . . (+1,010) . . N HIDS 59240 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = A security enabled group has been cr...") (top)
- 12:23, 21 October 2020 (diff | hist) . . (+1,043) . . N HIDS 18259 (Created page with " {{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = Windows Terminal Server has indicate...") (top)
- 12:21, 21 October 2020 (diff | hist) . . (+940) . . N HIDS 52511 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Anti-Virus }} = Description = This is a generic (level 3) event to collect r...") (top)
- 12:17, 21 October 2020 (diff | hist) . . (+747) . . N HIDS 59238 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit event }} = Description = A windows active directory group acco...") (top)
- 12:14, 21 October 2020 (diff | hist) . . (0) . . HIDS 60612 (top)
- 12:14, 21 October 2020 (diff | hist) . . (+921) . . N HIDS 60612 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows System Event }} = Description = Application has been installed on th...")
- 12:10, 21 October 2020 (diff | hist) . . (+1,111) . . N HIDS 18602 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows System Event }} = Description = Composite rule identified multiple W...") (top)
- 12:05, 21 October 2020 (diff | hist) . . (+1,166) . . N HIDS 19002 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Compliance Scanner }} = Description = The CIS Compliance scanner is reportin...") (top)
- 12:01, 21 October 2020 (diff | hist) . . (+1,012) . . N HIDS 61110 (Created page with "{{Infobox |header1 = Rule 1 |label2 = Status |data2 = Active |label3 = Alert Message |data3 = Windows audit failure event }} = Description = Composite IDS rule indicating...") (top)
(Latest | Earliest) View (newer 50 | older 50) (20 | 50 | 100 | 250 | 500)