QuestionQ59Verified/Incident Detection and ResponseCopy linkReport a problemAsk AstroTutorSave questionWhich ruleset may be applied in the /home/administrator/hids/ruleset/rules directory?ABCDShow AnswerAnswerExplanationOSSEC/Wazuh rules are defined in XML and use <group> and <rule> elements. Supported rule elements include decoded_as, description, match, field, and options, so the XML rule that detects destination port 445 is a valid HIDS ruleset definition.Learn moreWazuh Rules SyntaxShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion