Skip to content

Actions: elastic/detection-rules

Actions

Community

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
community.yml
1,204 workflow runs
1,204 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Add investigation guide for Amazon Bedrock Rules Community #2709: Pull request #4247 opened by shashank-elastic
12s
12s
[New Rule] Adding Coverage for AWS Discovery API Calls via CLI from a Single Resource Community #2708: Pull request #4246 opened by terrancedejesus
11s
11s
[New Rule] Adding Coverage for AWS IAM Customer-Managed Policy Attached to Role by Rare User Community #2707: Pull request #4245 opened by terrancedejesus
12s
12s
[New Rule] Adding Coverage for AWS IAM Create User via Assumed Role on EC2 Instance Community #2706: Pull request #4244 opened by terrancedejesus
11s
11s
[New Rule] Security File Access via Common Utilities Community #2705: Pull request #4243 opened by Aegrah
13s
13s
[New Rule] Private Key Searching Activity Community #2704: Pull request #4242 opened by Aegrah
11s
11s
[New Rule] Potential Hex Payload Execution Community #2703: Pull request #4241 opened by Aegrah
13s
13s
[New Rule] IPv4/IPv6 Forwarding Activity Community #2702: Pull request #4240 opened by Aegrah
12s
12s
[New Rule] Memory Swap Modification Community #2701: Pull request #4239 opened by Aegrah
12s
12s
[New Rule] Unusual Interactive Shell Launched from System User Community #2700: Pull request #4238 opened by Aegrah
11s
11s
[New Rule] Curl SOCKS Proxy Activity from Unusual Parent Community #2699: Pull request #4237 opened by Aegrah
12s
12s
[New Rule] Web Server Spawned via Python Community #2698: Pull request #4236 opened by Aegrah
13s
13s
[New Rule] Potential Data Splitting Detected Community #2697: Pull request #4235 opened by Aegrah
14s
14s
[Rule Tuning] 3rd Party EDR - Add Crowdstrike FDR support - 9 Community #2696: Pull request #4234 opened by w0rk3r
13s
13s
[Rule Tuning] 3rd Party EDR - Add Crowdstrike FDR support - 8 Community #2695: Pull request #4233 opened by w0rk3r
11s
11s
[Rule Tuning] 3rd Party EDR - Add Crowdstrike FDR support - 7 Community #2694: Pull request #4232 opened by w0rk3r
11s
11s
[Rule Tuning] 3rd Party EDR - Add Crowdstrike FDR support - 6 Community #2693: Pull request #4231 opened by w0rk3r
12s
12s
[Rule Tuning] 3rd Party EDR - Add Crowdstrike FDR support - 5 Community #2692: Pull request #4230 opened by w0rk3r
10s
10s
[New Rule] Adding Coverage for AWS SSM Command Document Created by Rare User Community #2691: Pull request #4229 opened by terrancedejesus
10s
10s
[Rule Tuning] Tuning AWS STS Temporary Credentials via AssumeRole Community #2690: Pull request #4228 opened by terrancedejesus
15s
15s
[New Rule] Directory Creation in /bin directory Community #2689: Pull request #4227 opened by Aegrah
13s
13s
[New Rule] Hidden Directory Creation via Unusual Parent Community #2688: Pull request #4226 opened by Aegrah
14s
14s
[Rule Tuning] 3rd Party EDR - Add Crowdstrike FDR support - 4 Community #2687: Pull request #4225 opened by w0rk3r
10s
10s
[New Rule] Adding Coverage for AWS SNS Email Subscription by Rare User Community #2686: Pull request #4224 opened by terrancedejesus
14s
14s
[FR] Add Versioning Processes to DR Community #2685: Pull request #4223 opened by Mikaayenson
12s
12s
ProTip! You can narrow down the results and go further in time using created:<2024-10-31 or the other filters available.