paulmataruso/main
1
0
Fork 0
mirror of https://github.com/socfortress/Wazuh-Rules.git synced 2025-10-23 08:12:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update 200300-packetbeat_rules.xml

Browse Source
This commit is contained in:
taylor_socfortress
2022-12-30 11:11:48 -06:00
committed by GitHub
parent 4cdc9485bd
commit 1c1f1727b7
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
Packetbeat/200300-packetbeat_rules.xml
View File

@@ -31,9 +31,9 @@
<options>no_full_log</options> <options>no_full_log</options>
<group>http</group> <group>http</group>
</rule> </rule>
<!-- TEMP RULE FOR WINDOWS PACKETBEAT ICMP --> <!-- EXCLUDE PACKETBEAT ICMP -->
<rule id="200303" level="3"> <rule id="200303" level="1">
<decoded_as>json</decoded_as> <decoded_as>json</decoded_as>
<field name="network.transport">icmp</field> <field name="network.transport">icmp</field>
<mitre> <mitre>