Skip to content

Actions: elastic/detection-rules

Actions

docs-cleanup

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
docs-cleanup.yml
674 workflow runs
674 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[Rule Tuning] Add Missing Metadata to KEEP conditions docs-cleanup #624: Pull request #5442 closed by w0rk3r
25s
25s
[Rule Tuning] Potential Masquerading as Svchost docs-cleanup #623: Pull request #5439 closed by w0rk3r
31s
31s
Lock versions for releases: 8.19,9.0,9.1,9.2 docs-cleanup #622: Pull request #5426 closed by shashank-elastic
7s
7s
[Rule Tuning] Microsoft Entra ID Excessive Account Lockouts Detected docs-cleanup #621: Pull request #5424 closed by shashank-elastic
24s
24s
Lock versions for releases: 8.19,9.0,9.1,9.2 docs-cleanup #620: Pull request #5423 closed by shashank-elastic
9s
9s
[Rule Tuning] Remove New Wiz Defend Rule (Add Wiz Defend to External Alerts) docs-cleanup #619: Pull request #5422 closed by shashank-elastic
26s
26s
December Schema Refresh docs-cleanup #618: Pull request #5420 closed by shashank-elastic
18s
18s
[Rule Tuning] AWS RDS DB Snapshot Shared with Another Account docs-cleanup #617: Pull request #5418 closed by imays11
26s
26s
[Rule Tuning] AWS KMS Customer Managed Key Disabled or Scheduled for Deletion docs-cleanup #616: Pull request #5417 closed by imays11
30s
30s
[Rule Tunings] AWS S3 Bucket Replicated to Another Account | AWS S3 Bucket Policy Added to Share with External Account docs-cleanup #615: Pull request #5405 closed by imays11
23s
23s
[Rule Tunings] AWS Multiple API Calls ESQL rules docs-cleanup #614: Pull request #5238 closed by imays11
21s
21s
[Rule Tuning] Creation or Modification of Pluggable Authentication Mo… docs-cleanup #613: Pull request #5421 closed by shashank-elastic
35s
35s
Update lateral_movement_scheduled_task_target.toml to fix null values docs-cleanup #612: Pull request #5228 closed by shashank-elastic
31s
31s
[New Rule] Wiz Defend Promotion Alerts docs-cleanup #611: Pull request #5410 closed by Samirbous
35s
35s
[Tuning] Potential Masquerading as Svchost" docs-cleanup #610: Pull request #5416 closed by Samirbous
28s
28s
[Rule Tuning] Suspicious React Server Child Process docs-cleanup #609: Pull request #5419 closed by Aegrah
32s
32s
[New Rule] React2Shell Detection docs-cleanup #608: Pull request #5408 closed by terrancedejesus
31s
31s
[Tuning] Rare Connection to WebDAV Target docs-cleanup #607: Pull request #5415 closed by Samirbous
19s
19s
[New Rule] AWS EC2 LOLBin Execution via SSM docs-cleanup #606: Pull request #5354 closed by terrancedejesus
22s
22s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules docs-cleanup #605: Pull request #5352 closed by Mikaayenson
45s
45s
[Rule Tuning] AWS STS AssumeRoot by Rare User and Member Account docs-cleanup #604: Pull request #5398 closed by imays11
35s
35s
[Rule Tuning] AWS S3 Object Encryption Using External KMS Key docs-cleanup #603: Pull request #5399 closed by imays11
18s
18s
[Rule Tuning] AWS Access Token Used from Multiple Addresses docs-cleanup #602: Pull request #5412 closed by imays11
21s
21s
[Rule Tuning] Interval fix + Datastream values to ESQL Rules docs-cleanup #601: Pull request #5413 closed by Aegrah
35s
35s
[Rule Tuning] Update PowerShell ES|QL Rules KEEP Condition docs-cleanup #600: Pull request #5391 closed by Aegrah
23s
23s