A rule that is present, enabled, and silent: what Wazuh 92900 shows about coverage reports

Wazuh rule 92900 is meant to catch LSASS credential dumping. It matches on an enumerated list of...