(Gitlab) created a new project. · project_autor = \.+

Description

(Gitlab) $(project_autor) created a new project.

Query · wazuh

decoded_as=gitlab-12-application-log AND field project_autor="\.+"
Raw source (Gitlab) created a new project. · project_autor = \.+ · Wazuh XML
Esc
Published by Wazuh Core Ruleset ↗, licensed under GPLv2 ↗. Reproduced here unmodified. 
<rule id="65604" level="3">
    <decoded_as>gitlab-12-application-log</decoded_as>
    <field name="project_autor">\.+</field>
    <description>(Gitlab) $(project_autor) created a new project.</description>
  </rule>

Detection rules belong to the projects that publish them and remain under their own licenses. This site indexes and links to them; it claims no rights in them.