Commits

Branch selector

 main

User selector

All users

Datepicker

All time

Commit History

Commits on Jan 16, 2025

• Merge pull request #4 from elastic/main

  Show description for 6926175
  jmbass

  authored
  6926175

  Copy full SHA for 6926175

• [New Rules] Kernel Seeking/Unpacking Activity (elastic#4341)

  Show description for ac541f0
  Aegrah

  authored
  ac541f0

  Copy full SHA for ac541f0

• [New Rule] System Binary Path File Permission Modification (elastic#4339)

  Aegrah

  authored
  bba5096

  Copy full SHA for bba5096

• [New Rule] Suspicious Path Invocation from Command Line (elastic#4338)

  Aegrah

  authored
  75c7c09

  Copy full SHA for 75c7c09

• [New BBR] Linux System Information Discovery via Getconf (elastic#4337)

  Show description for 9186c5e
  Aegrah

  authored
  9186c5e

  Copy full SHA for 9186c5e

Commits on Jan 15, 2025

• [New Rule] Adding Coverage for Unusual AWS S3 Object Encryption with SSE-C (elastic#4377)

  Show description for 5162067
  terrancedejesus

  authored
  5162067

  Copy full SHA for 5162067

• [New Rule] Adding Coverage for SNS Topic Message Publish by Rare User (elastic#4350)

  Show description for c04ae6d
  terrancedejesus

  authored
  c04ae6d

  Copy full SHA for c04ae6d

• [New Rule] Adding Coverage for AWS EC2 Deprecated AMI Discovery (elastic#4328)

  Show description for 97b3f43
  terrancedejesus

  authored
  97b3f43

  Copy full SHA for 97b3f43

• Provide Deprecate Warnings for Experimental ML commands (elastic#4365)

  shashank-elastic

  authored
  32f5966

  Copy full SHA for 32f5966

• [Rule Tuning] Adjusting Verbiage for AWS EC2 Instance Connect SSH Public Key Uploaded (elastic#4334)

  Show description for f8312cc
  terrancedejesus

  authored
  f8312cc

  Copy full SHA for f8312cc

• [New Rule] Adding Coverage for AWS SQS Queue Purge (elastic#4354)

  Show description for f97007f
  terrancedejesus

  authored
  f97007f

  Copy full SHA for f97007f

• [Rule Tuning] Suspicious Communication App Child Process (elastic#4369)

  w0rk3r

  authored
  447fce3

  Copy full SHA for 447fce3

• [Bug] [DaC] Actions Connector Defaults to None (elastic#4376)

  Show description for cc00963
  eric-forte-elastic

  authored
  cc00963

  Copy full SHA for cc00963

• [Rule Tuning] Posh BBRs (elastic#4372)

  w0rk3r

  authored
  74f11db

  Copy full SHA for 74f11db

Commits on Jan 14, 2025

• maintenance - remove hunting TOML files from repo version checks (elastic#4374)

  terrancedejesus

  authored
  c912b78

  Copy full SHA for c912b78

• [New] Sensitive Audit Policy Sub-Category Disabled (elastic#4373)

  Show description for bcca0a2
  

  Samirbous

  and

  w0rk3r

  authored
  bcca0a2

  Copy full SHA for bcca0a2

Commits on Jan 13, 2025

• [Hunt Tuning] Persistence via SSH Configurations and/or Keys (elastic#4351)

  Show description for e822af4
  Aegrah

  authored
  e822af4

  Copy full SHA for e822af4

• [New Rule] Potential Process Name Stomping with Prctl (elastic#4352)

  Show description for 79b2608
  Aegrah

  authored
  79b2608

  Copy full SHA for 79b2608

• [Rule Tuning] Windows Misc BBR Tuning (elastic#4368)

  Show description for 0e1edfe
  w0rk3r

  authored
  0e1edfe

  Copy full SHA for 0e1edfe

• [Rule: Tuning] - Azure blob permission modification tagging - Correct tags (elastic#4371)

  Show description for f52cfb3
  

  jvalente-salemstate

  and

  w0rk3r

  authored
  f52cfb3

  Copy full SHA for f52cfb3

Commits on Jan 10, 2025

• updating token references (elastic#4367)

  terrancedejesus

  authored
  32a94dc

  Copy full SHA for 32a94dc

• Update discovery_potential_syn_port_scan_detected.toml (elastic#4366)

  Samirbous

  authored
  65b95a1

  Copy full SHA for 65b95a1

Commits on Jan 9, 2025

• maintenance repository config update pt 4 (elastic#4364)

  terrancedejesus

  authored
  46637f3

  Copy full SHA for 46637f3

• [Maintenance] Repository Config Update pt 3 (elastic#4363)

  Show description for 98cef59
  terrancedejesus

  authored
  98cef59

  Copy full SHA for 98cef59

• updated package token (elastic#4361)

  terrancedejesus

  authored
  4e588e8

  Copy full SHA for 4e588e8

• [Maintenance] Repository Config Update (elastic#4359)

  Show description for ad18077
  

  terrancedejesus

  and

  eric-forte-elastic

  authored
  ad18077

  Copy full SHA for ad18077

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 10 (elastic#4357)

  Show description for 6b0b988
  w0rk3r

  authored
  6b0b988

  Copy full SHA for 6b0b988

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 8 (elastic#4355)

  w0rk3r

  authored
  7eeca00

  Copy full SHA for 7eeca00

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 7 (elastic#4349)

  Show description for e66bca7
  

  w0rk3r

  and

  Aegrah

  authored
  e66bca7

  Copy full SHA for e66bca7

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 4 (elastic#4345)

  Show description for cc889e3
  

  w0rk3r

  and

  Aegrah

  authored
  cc889e3

  Copy full SHA for cc889e3

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 3 (elastic#4343)

  Show description for 0fc83fe
  

  w0rk3r

  and

  Aegrah

  authored
  0fc83fe

  Copy full SHA for 0fc83fe

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 6 (elastic#4348)

  w0rk3r

  authored
  d6ceb88

  Copy full SHA for d6ceb88

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 5 (elastic#4346)

  Show description for f4a022c
  

  w0rk3r

  and

  Aegrah

  authored
  f4a022c

  Copy full SHA for f4a022c

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 9 (elastic#4356)

  w0rk3r

  authored
  2af2e1f

  Copy full SHA for 2af2e1f

Commits on Jan 8, 2025

• [Rule Tuning] Linux 3rd Party EDR Support - Crowdstrike and S1 - 2 (elastic#4333)

  Show description for 4142868
  

  w0rk3r

  and

  shashank-elastic

  authored
  4142868

  Copy full SHA for 4142868

Pagination

Previous

Next