Eva López Ruiz
Eva López Ruiz
I update oscap's contents to solve this [issue](https://github.com/wazuh/wazuh-ruleset/issues/250). I modified all files and added two new files: ``` scap_content/cve-ubuntu-cosmic-oval.xml scap_content/ssg-ubuntu-1804-ds.xml ``` I download the security policies in: * [Debian web](https://www.debian.org/security/oval/)...
| Related issue | | --- | | [533](https://github.com/wazuh/wazuh-ruleset/issues/533) | Hello team, I found some issues in Owncloud rules and decoders. In this PR I try to solve it. I...
We are improving Ruleset. Add rules and decoders for: - [ ] Switches DLink DGS 1210 - [x] SSH [FreePBX](https://www.freepbx.org/) - [ ] SSH [OPNsense](https://opnsense.org/) Add rules and decoders for...
Hello team! I tested Ruleset and I have noted two bugs in `runtest.py` script: 1. When a test fails `test_decoders.xml` and `test_ruleset.xml` files don't remove. I think it is due...
Hi team, Exists some rules and decoders for Symantec products. They can be found in [0120-sysmantec-av_rules.xml](https://github.com/wazuh/wazuh-ruleset/blob/master/rules/0120-symantec-av_rules.xml), [0125-sysmantec-ws_rules.xml](https://github.com/wazuh/wazuh-ruleset/blob/master/rules/0125-symantec-ws_rules.xml) and [0330-sysmantec_decoders.xml](https://github.com/wazuh/wazuh-ruleset/blob/master/decoders/0330-symantec_decoders.xml) files. These rules have not been modified for three years and...
Hello team, I have noted Owncloud rules and decoders have some issues. I'll list them below: 1. Some logs examples have strange characters 2. Following decoder isn't necessary: https://github.com/wazuh/wazuh-ruleset/blob/de407b8c0038b95641029346bf86a7de4049c270/decoders/0435-owncloud_decoders.xml#L44-L46 And...
Hi team, A community user has reported he obtains false virus detected alert. You can read more about it in this mailing thread: [ClamAV false Virus detected alert](https://groups.google.com/forum/#!topic/wazuh/UwNNMb53LxU). It's caused...
Hi team, I have noticed that the log examples found in `0610-win-ms_logs_rules.xml` don't match their rules. It is due the fields `providerName` and `channel` aren't correct. https://github.com/wazuh/wazuh-ruleset/blob/725a0155cfde0a849729d9d174f03e1453e31242/rules/0610-win-ms_logs_rules.xml#L37-L63 To match rules...