Grouping for the proftpd rules.
Description
Grouping for the proftpd rules.
Query · wazuh
decoded_as=proftpd
Fires when
Wazuh evaluates a chain top-down. Every rule above this one must match on the same event before this rule is tested at all.
-
decoded_as=proftpd
Refined by
22 rules chain off this one, narrowing it further.