Skip to content

Actions: elastic/detection-rules

Actions

Branch Version Status Checks

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
branch-status-checks.yml
4,584 workflow runs
4,584 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[Rule Tuning] Node.js Pre or Post-Install Script Execution to Cross-Platform Branch Version Status Checks #13561: Pull request #5403 synchronize by terrancedejesus
1m 4s terrancedejesus/issue5402
terrancedejesus/issue5402
1m 4s
[Rule Tuning] Node.js Pre or Post-Install Script Execution to Cross-Platform Branch Version Status Checks #13560: Pull request #5403 synchronize by terrancedejesus
1m 24s terrancedejesus/issue5402
terrancedejesus/issue5402
1m 24s
[Rule Tuning] Node.js Pre or Post-Install Script Execution to Cross-Platform Branch Version Status Checks #13559: Pull request #5403 opened by terrancedejesus
53s terrancedejesus/issue5402
terrancedejesus/issue5402
53s
[New Rule] Unusual Web Server Command Execution Branch Version Status Checks #13558: Pull request #5392 synchronize by Aegrah
50s new-rule-general-web-server-sus-command-exec-new-terms
new-rule-general-web-server-sus-command-exec-new-terms
50s
[Rule Tuning] M365 OneDrive Excessive File Downloads with OAuth Token Branch Version Status Checks #13557: Pull request #5365 synchronize by terrancedejesus
9s terrancedejesus/issue5361
terrancedejesus/issue5361
9s
[New Rule] Pod or Container Creation with Suspicious Command-Line Branch Version Status Checks #13556: Pull request #5379 synchronize by Aegrah
10s suspicious-pod-or-container-creation
suspicious-pod-or-container-creation
10s
[New Rule] Pod or Container Creation with Suspicious Command-Line Branch Version Status Checks #13555: Pull request #5379 synchronize by Aegrah
1m 8s suspicious-pod-or-container-creation
suspicious-pod-or-container-creation
1m 8s
[Rule Tuning] Python Startup Hook Rules Branch Version Status Checks #13554: Pull request #5400 opened by Aegrah
1m 21s mitre-tag-tuning
mitre-tag-tuning
1m 21s
[Rule Tuning] AWS S3 Object Encryption Using External KMS Key Branch Version Status Checks #13553: Pull request #5399 opened by imays11
54s tune_aws_external_kms_key_s3_copy
tune_aws_external_kms_key_s3_copy
54s
[Rule Tuning] AWS EFS File System Deleted Branch Version Status Checks #13552: Pull request #5369 synchronize by imays11
56s tune_aws_efs_deleted
tune_aws_efs_deleted
56s
[Rule Tunings] AWS RDS Rules Branch Version Status Checks #13551: Pull request #5366 synchronize by imays11
48s tuning_aws_rds_rules
tuning_aws_rds_rules
48s
[Rule Tuning] AWS STS AssumeRoot by Rare User and Member Account Branch Version Status Checks #13550: Pull request #5398 opened by imays11
1m 1s aws_assume_root_tune
aws_assume_root_tune
1m 1s
Update actions/checkout action to v6 Branch Version Status Checks #13549: Pull request #5349 synchronize by elastic-renovate-prod bot
56s renovate/actions-checkout-6.x
renovate/actions-checkout-6.x
56s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13548: Pull request #5396 synchronize by Samirbous
50s dc-seq
dc-seq
50s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13547: Pull request #5396 synchronize by Samirbous
1m 7s dc-seq
dc-seq
1m 7s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13546: Pull request #5396 synchronize by Samirbous
55s dc-seq
dc-seq
55s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13545: Pull request #5396 synchronize by Samirbous
58s dc-seq
dc-seq
58s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13544: Pull request #5396 synchronize by Samirbous
56s dc-seq
dc-seq
56s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13543: Pull request #5396 synchronize by Samirbous
50s dc-seq
dc-seq
50s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13542: Pull request #5396 synchronize by Samirbous
51s dc-seq
dc-seq
51s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13541: Pull request #5396 synchronize by Samirbous
1m 1s dc-seq
dc-seq
1m 1s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13540: Pull request #5396 synchronize by Samirbous
55s dc-seq
dc-seq
55s
[New Rule] Entra ID Mismatched Device Code Auth Attempts for Single User Branch Version Status Checks #13539: Pull request #5397 opened by terrancedejesus
47s terrancedejesus/issue5395
terrancedejesus/issue5395
47s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13538: Pull request #5396 opened by Samirbous
50s dc-seq
dc-seq
50s
[Rule Tuning] Potential PowerShell Obfuscated Script Branch Version Status Checks #13537: Pull request #5389 synchronize by w0rk3r
56s rt_4
rt_4
56s
ProTip! You can narrow down the results and go further in time using created:<2025-12-02 or the other filters available.