wazuh-alerts-4.x*


Events by source over time

Events by source over time

Count


Sources

Sources


Events

Events


wazuh-amazon-aws-v1.0


Top 5 events

Top 5 events


Events by source over time - Docker

Events by source over time - Docker

Count


Events - Docker

Events - Docker


wazuh-docker-listener-v1.0


Alert groups

Alert groups


Events - Incident response

Events - Incident response

Question: rule.groups:audit

Count


Incident response

Incident response


wazuh-incident-response-v1.0


Critical severity alerts

Critical severity alerts

Question: data.vulnerability.severity:Critical


High Severity Alerts

High Severity Alerts

Question: data.vulnerability.severity:High


Medium Severity Alerts

Medium Severity Alerts

Question: data.vulnerability.severity:Medium


Alert severity

Alert severity

Count


Low Severity Alerts

Low Severity Alerts

Question: data.vulnerability.severity:Low


Vulnerabilities heat map

Vulnerabilities heat map


Vulnerabilities events

Vulnerabilities events


Events

Events

wazuh-vulnerabilities-v1.0


Total alerts

Total alerts


Level 12 or above alerts

Level 12 or above alerts

Question: rule.level:[12 TO *]


Authentication failure

Authentication failure

Question: rule.groups:authentication_failed OR rule.groups:win_authentication_failed OR rule.groups:authentication_failures


Authentication success

Authentication success


Alert level evolution

Alert level evolution

Count


Top MITRE ATT&CKS

Top MITRE ATT&CKS


Security alerts main

Security alerts main


Alert level evolution - Top 5 agents

Alert level evolution - Top 5 agents

Top Mitre ATT&K tactics

Top Mitre ATT&K tactics

Security alerts

Security alerts

wazuh-security-events-v1.0


Emotet malware activity

Emotet malware activity

Question: rule.groups:"rootcheck"

Count


Rootkits activity over time

Rootkits activity over time

Count


Security alerts

Security alerts


wazuh-malware-detection-v1.0


PCI DSS requirements

PCI DSS requirements

Count


Requirements by agent

Requirements by agent

Count


Recent events - PCI DSS

Recent events - PCI DSS


wazuh-pci-dss-v1.0