paulmataruso/main
1
0
Fork 0
mirror of https://github.com/socfortress/Wazuh-Rules.git synced 2025-10-23 00:02:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create 200500-sap.xml

Browse Source
This commit is contained in:
taylor_socfortress
2023-10-25 07:42:10 -05:00
committed by GitHub
parent d649e76a96
commit b40ef0083e
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
SAP/200500-sap.xml Normal file
View File

@@ -0,0 +1,13 @@
<group name="sap_siem,">
<rule id="200500" level="3">
<field name="integration">sap_siem</field>
<description>SAP SIEM Integration</description>
<options>no_full_log</options>
</rule>
<rule id="200501" level="8">
<if_sid>200500</if_sid>
<field name="errCode">403120|403042</field>
<description>SAP SIEM: $(errDetails)</description>
<options>no_full_log</options>
</rule>
</group>