Skip to content

Actions: elastic/detection-rules

Actions

Community

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
community.yml
1,220 workflow runs
1,220 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New] Potential Masquerading as Svchost Community #3713: Pull request #5305 opened by Samirbous
13s
13s
[Rule Tuning] Remote File Creation in World Writeable Directory Community #3712: Pull request #5304 opened by Aegrah
7s
7s
[Rule Tuning] Remote File Creation in World Writeable Directory Community #3711: Issue #5303 opened by girtsLv
10s
10s
[Rule Tuning] Connection to Commonly Abused Web Services Community #3710: Issue #5302 opened by girtsLv
10s
10s
[New Rule] Potential Git CVE-2025-48384 Exploitation Community #3709: Pull request #5301 opened by Aegrah
7s
7s
[New] New USB Storage Device Mounted Community #3708: Pull request #5299 opened by Samirbous
7s
7s
Refresh Manifest and Schemas November Update Community #3707: Pull request #5298 opened by shashank-elastic
8s
8s
added new rule Community #3706: Pull request #5297 opened by stuartMoorhouse
7s
7s
[Rule Tunings] AWS Bedrock Rules Community #3705: Pull request #5296 opened by Mikaayenson
8s
8s
[Tuning] Agent Spoofing - Mismatched Agent ID Community #3704: Pull request #5295 opened by shashank-elastic
10s
10s
[New Rule] Potential SSH Password Grabbing via strace Community #3703: Pull request #5294 opened by Aegrah
7s
7s
[Rule Tuning] Microsoft 365 Global Administrator Role Assigned Community #3702: Pull request #5293 opened by terrancedejesus
6s
6s
[Rule Tunings] AWS Cloudtrail Created/Updated/Suspended/Deleted Community #3701: Pull request #5292 opened by imays11
8s
8s
[Rule Tuning] Rapid Secret Retrieval Attempts from AWS SecretsManager Community #3700: Pull request #5291 opened by imays11
10s
10s
[Rule Tuning] Logic Overlap between Execution from Unusual Path - Command Line and Process Execution from an Usual Directory Community #3699: Issue #5290 opened by veritasr3x
9s
9s
[FR] Support management of value lists with the DaC repo Community #3698: Issue #5289 opened by hnguyen-coreweave
9s
9s
[Rule Tuning] Microsoft 365 Global Administrator Role Assigned Community #3697: Issue #5288 opened by terrancedejesus
7s
7s
[Tuning] Outbound Scheduled Task Activity via PowerShell Community #3696: Pull request #5287 opened by Samirbous
9s
9s
[Bug] execution_scheduled_task_powershell_source doesn't work against logs-windows.sysmon_operational Community #3695: Issue #5286 opened by btrieger
8s
8s
[Rule Tuning] AWS EC2 Instance Console Login via Assumed Role Community #3694: Pull request #5285 opened by imays11
7s
7s
[Rule Tuning] AWS IAM SAML Provider Updated Community #3693: Pull request #5284 opened by imays11
6s
6s
[Bug] test_preserve_upstream_protected_rule_id_name fails when CUSTOM_RULES_DIR is set Community #3692: Issue #5283 opened by hnguyen-coreweave
10s
10s
[Rule Tuning] AWS IAM Brute Force of Assume Role Policy Community #3691: Pull request #5282 opened by imays11
6s
6s
[Rule Tuning] AWS IAM CompromisedKeyQuarantine Policy Attached to User Community #3690: Pull request #5281 opened by imays11
7s
7s
MITRE ATT&CK Sub-Technique Update - Solves Issue #5279 Community #3689: Pull request #5280 opened by veritasr3x
10s
10s