Just did some dirty wazuh rules and decoders. ssh, drop, accept are already covered in standard rules
rules
<rule id="100001" level="4">
<program_name>rc_service</program_name>
<description>Info from Asus XT8 Firewall</description>
</rule>
<rule id="100002" level="4">...