Skip to content

Actions: elastic/detection-rules

Actions

Branch Version Status Checks

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
branch-status-checks.yml
4,590 workflow runs
4,590 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13542: Pull request #5396 synchronize by Samirbous
51s dc-seq
dc-seq
51s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13541: Pull request #5396 synchronize by Samirbous
1m 1s dc-seq
dc-seq
1m 1s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13540: Pull request #5396 synchronize by Samirbous
55s dc-seq
dc-seq
55s
[New Rule] Entra ID Mismatched Device Code Auth Attempts for Single User Branch Version Status Checks #13539: Pull request #5397 opened by terrancedejesus
47s terrancedejesus/issue5395
terrancedejesus/issue5395
47s
[New] Suspicious Microsoft Entra ID Concurrent Sign-Ins via DeviceCode Branch Version Status Checks #13538: Pull request #5396 opened by Samirbous
50s dc-seq
dc-seq
50s
[Rule Tuning] Potential PowerShell Obfuscated Script Branch Version Status Checks #13537: Pull request #5389 synchronize by w0rk3r
56s rt_4
rt_4
56s
[New Rule] Web Server Potential Remote File Inclusion Activity Branch Version Status Checks #13536: Pull request #5394 opened by Aegrah
1m 20s new-rule-potential-rfi
new-rule-potential-rfi
1m 20s
[New Rule] Web Server Local File Inclusion Activity Branch Version Status Checks #13535: Pull request #5393 synchronize by Aegrah
55s new-rule-potential-lfi-request
new-rule-potential-lfi-request
55s
[New Rule] Web Server Local File Inclusion Activity Branch Version Status Checks #13534: Pull request #5393 opened by Aegrah
54s new-rule-potential-lfi-request
new-rule-potential-lfi-request
54s
[Rule Tuning] Update PowerShell ES|QL Rules KEEP Condition Branch Version Status Checks #13533: Pull request #5391 synchronize by w0rk3r
56s rt_5
rt_5
56s
[Rule Tuning] Update PowerShell ES|QL Rules KEEP Condition Branch Version Status Checks #13532: Pull request #5391 synchronize by w0rk3r
1m 3s rt_5
rt_5
1m 3s
[New] Multiple Cloud Secrets Accessed by Source Address Branch Version Status Checks #13531: Pull request #5388 synchronize by Samirbous
53s multi-ds-secrets-access
multi-ds-secrets-access
53s
[New Rule] Unusual Web Server Command Execution Branch Version Status Checks #13530: Pull request #5392 synchronize by Aegrah
12s new-rule-general-web-server-sus-command-exec-new-terms
new-rule-general-web-server-sus-command-exec-new-terms
12s
[New Rule] Unusual Web Server Command Execution Branch Version Status Checks #13529: Pull request #5392 opened by Aegrah
54s new-rule-general-web-server-sus-command-exec-new-terms
new-rule-general-web-server-sus-command-exec-new-terms
54s
[New/Tuning] NPM Shai-Hulud coverage Branch Version Status Checks #13528: Pull request #5368 synchronize by Samirbous
50s shaih-cov
shaih-cov
50s
[New] Multiple Cloud Secrets Accessed by Source Address Branch Version Status Checks #13527: Pull request #5388 synchronize by Samirbous
49s multi-ds-secrets-access
multi-ds-secrets-access
49s
[New Rule] Web Server Potential SQL Injection Request Branch Version Status Checks #13526: Pull request #5342 synchronize by Aegrah
48s new-rule-potential-sqi-payload
new-rule-potential-sqi-payload
48s
[New Rule] Web Server Potential SQL Injection Request Branch Version Status Checks #13525: Pull request #5342 synchronize by Aegrah
53s new-rule-potential-sqi-payload
new-rule-potential-sqi-payload
53s
[New/Tuning] NPM Shai-Hulud coverage Branch Version Status Checks #13524: Pull request #5368 synchronize by Samirbous
53s shaih-cov
shaih-cov
53s
[New Rule] Tampering with RUNNER_TRACKING_ID in GitHub Actions Runners Branch Version Status Checks #13523: Pull request #5370 synchronize by Aegrah
54s runner-via-runner-tracking-id
runner-via-runner-tracking-id
54s
[Rule Tuning] File Deletion via Shred Branch Version Status Checks #13522: Pull request #5381 synchronize by Aegrah
11s shred-command-rule-tuning
shred-command-rule-tuning
11s
[Rule Tuning] File Deletion via Shred Branch Version Status Checks #13521: Pull request #5381 synchronize by Aegrah
49s shred-command-rule-tuning
shred-command-rule-tuning
49s
[Rule Tuning] At Job Created or Modified Branch Version Status Checks #13520: Pull request #5378 synchronize by Aegrah
13s at-rule-creation-tuning
at-rule-creation-tuning
13s
[New Rule] Potential Secret Scanning via Gitleaks Branch Version Status Checks #13519: Pull request #5377 synchronize by Aegrah
52s gitleaks-secret-scanning
gitleaks-secret-scanning
52s
[New Rule] Privileged Container Creation with Host Directory Mount Branch Version Status Checks #13518: Pull request #5373 synchronize by Aegrah
10s new-rule-docker-exec-host-ref-via-priv-container
new-rule-docker-exec-host-ref-via-priv-container
10s
ProTip! You can narrow down the results and go further in time using created:<2025-12-02 or the other filters available.