Skip to content

Actions: elastic/detection-rules

Actions

Community

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
community.yml
1,204 workflow runs
1,204 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New Rule] Loadable Kernel Module Configuration File Creation Community #2759: Pull request #4307 opened by Aegrah
14s
14s
[New Rule] Dynamic Linker (ld.so) Creation Community #2758: Pull request #4306 opened by Aegrah
46s
46s
[New Rule] Unusual Preload Environment Variable Process Execution Community #2757: Pull request #4305 opened by Aegrah
12s
12s
[Rule Tuning] Creation or Modification of Pluggable Authentication Mo… Community #2756: Pull request #4304 opened by Aegrah
14s
14s
[New Rule] Unusual SSHD Child Process Community #2755: Pull request #4303 opened by Aegrah
12s
12s
[New Rule] Pluggable Authentication Module Creation in Unusual Directory Community #2754: Pull request #4302 opened by Aegrah
10s
10s
[New Rule] Pluggable Authentication Module Source Download Community #2753: Pull request #4301 opened by Aegrah
12s
12s
[New Rule] PAM Version Discovery Community #2752: Pull request #4300 opened by Aegrah
14s
14s
Enhance Readability of validation check failures Community #2751: Pull request #4299 opened by shashank-elastic
15s
15s
[Rule Tuning] Windows misc Rule Tuning Community #2750: Pull request #4298 opened by w0rk3r
16s
16s
[New Rule] Adding Coverage for Azure Entra MFA TOTP Brute Force Attempts Community #2749: Pull request #4297 opened by terrancedejesus
11s
11s
Update versioning support for 8.17 Community #2748: Pull request #4296 opened by shashank-elastic
11s
11s
Minstack endpoint rules with process.group.id fields Community #2747: Pull request #4294 opened by shashank-elastic
12s
12s
[Rule Tuning] Remove Trailing Comma in AWS IAM User Created Access Keys For Another User Community #2746: Pull request #4292 opened by terrancedejesus
11s
11s
[Rule Tuning] Update Okta and Github Min-Stack Versions for Release Community #2745: Pull request #4290 opened by terrancedejesus
10s
10s
Prep for Release 8.18 Community #2744: Pull request #4288 opened by shashank-elastic
19s
19s
[Rule Tuning] login_activity_by_source_address.toml Community #2743: Issue #4287 opened by farbod-sec
11s
11s
[Tuning] Uncommon Registry Persistence Change Community #2742: Pull request #4286 opened by rad9800
14s
14s
[Bug] [DaC] Metadata maturity field default mismatch and poor enforcement of rule naming conventions Community #2741: Pull request #4285 opened by eric-forte-elastic
13s
13s
[Tuning] SDH - Removing timestamp_overide for Threat Match Rules Community #2740: Pull request #4284 opened by imays11
13s
13s
[Tuning] SDH - Possible Consent Grant Attack via Azure-Registered Application Community #2739: Pull request #4283 opened by imays11
14s
14s
[Bug] [DaC] Metadata maturity field default mismatch and poor enforcement of rule naming conventions Community #2738: Issue #4282 opened by eric-forte-elastic
9s
9s
[Rule Tuning] Multiple rules with excessively high max_signals value Community #2737: Issue #4281 opened by tttttx2
10s
10s
[New Hunt] Adding Hunting Query for AWS IAM Unusual AWS Access Key Usage for User Community #2736: Pull request #4280 opened by terrancedejesus
14s
14s
Add all historical versions for v8.17.0 and above packages Community #2735: Pull request #4279 opened by shashank-elastic
13s
13s
ProTip! You can narrow down the results and go further in time using created:<2024-12-03 or the other filters available.