(504: Command parameter not implemented).
Description
(504: Command parameter not implemented).
Fires when
Wazuh evaluates a chain top-down. Every rule above this one must match on the same event before this rule is tested at all.
-
decoded_as=postfix-reject -
Matches no fields of its own.
Rule dependencies
Depends on
-
composes · Wazuh if_sid
3300
Rule logic
Source file