Skip to content

Actions: elastic/detection-rules

Actions

ES|QL Validation

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
esql-validation.yml
935 workflow runs
935 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[Rule Tuning] Elastic Agent Service Terminated ES|QL Validation #137: Pull request #5272 synchronize by alstolten
15s alstolten:main
alstolten:main
15s
[Rule Tunings] AWS IAM Virtual MFA Device Rules ES|QL Validation #135: Pull request #5275 opened by imays11
17s tune_aws_iam_mfa_rules
tune_aws_iam_mfa_rules
17s
[Rule Tuning] AWS GetSessionToken Abuse ES|QL Validation #134: Pull request #5274 opened by imays11
15s tune_aws_get_session_token
tune_aws_get_session_token
15s
[New] Suspicious Kerberos Authentication Ticket Request ES|QL Validation #133: Pull request #5260 synchronize by Samirbous
14s kerb-unusual-client
kerb-unusual-client
14s
[New] Suspicious Kerberos Authentication Ticket Request ES|QL Validation #132: Pull request #5260 synchronize by Samirbous
20s kerb-unusual-client
kerb-unusual-client
20s
[New] Suspicious Kerberos Authentication Ticket Request ES|QL Validation #131: Pull request #5260 synchronize by Samirbous
16s kerb-unusual-client
kerb-unusual-client
16s
[New] Suspicious Kerberos Authentication Ticket Request ES|QL Validation #130: Pull request #5260 synchronize by Samirbous
16s kerb-unusual-client
kerb-unusual-client
16s
[Rule Tuning] Elastic Agent Service Terminated ES|QL Validation #129: Pull request #5272 opened by alstolten
16s alstolten:main
alstolten:main
16s
[Rule Tuning] M365 Impossible / Atypical Travel FN ES|QL Validation #128: Pull request #5267 synchronize by terrancedejesus
20s terrancedejesus/issue5239
terrancedejesus/issue5239
20s
[Rule Tuning] File Transfer or Listener Established via Netcat ES|QL Validation #127: Pull request #5223 synchronize by Aegrah
17s rule-tuning-nc-listener
rule-tuning-nc-listener
17s
[Rule Tunings] AWS Group Creation, User Added to Group, Group Deletion ES|QL Validation #126: Pull request #5269 opened by imays11
16s tune_group_changes_aws
tune_group_changes_aws
16s
[Rule Tuning][New Rule] AWS S3 Bucket Policy Added to Share with External Account/ to Allow Public Access ES|QL Validation #125: Pull request #5268 synchronize by imays11
21s tune_aws_public_policy
tune_aws_public_policy
21s
[Rule Tuning][New Rule] AWS S3 Bucket Policy Added to Share with External Account/ to Allow Public Access ES|QL Validation #124: Pull request #5268 synchronize by imays11
15s tune_aws_public_policy
tune_aws_public_policy
15s
[Rule Tuning][New Rule] AWS S3 Bucket Policy Added to Share with External Account/ to Allow Public Access ES|QL Validation #123: Pull request #5268 opened by imays11
19s tune_aws_public_policy
tune_aws_public_policy
19s
[Rule Tuning] M365 Impossible / Atypical Travel FN ES|QL Validation #122: Pull request #5267 opened by terrancedejesus
16s terrancedejesus/issue5239
terrancedejesus/issue5239
16s
[New Rule] Privilege Escalation via SUID/SGID Proxy Execution ES|QL Validation #121: Pull request #5266 synchronize by Aegrah
18s binfmt-suid-exploitation
binfmt-suid-exploitation
18s
[New Rule] Privilege Escalation via SUID/SGID Proxy Execution ES|QL Validation #120: Pull request #5266 synchronize by Aegrah
21s binfmt-suid-exploitation
binfmt-suid-exploitation
21s
[New Rule] Privilege Escalation via SUID/SGID Proxy Execution ES|QL Validation #119: Pull request #5266 opened by Aegrah
22s binfmt-suid-exploitation
binfmt-suid-exploitation
22s
[Rule Tuning] AWS S3 Bucket Configuration Deletion ES|QL Validation #118: Pull request #5265 opened by imays11
15s tune_aws_s3_configuration_changes
tune_aws_s3_configuration_changes
15s
[New] Suspicious Kerberos Authentication Ticket Request ES|QL Validation #117: Pull request #5260 synchronize by Samirbous
16s kerb-unusual-client
kerb-unusual-client
16s
[Bug] [DAC] Auto Gen Schema Fails on Certain Subqueries ES|QL Validation #116: Pull request #5256 synchronize by eric-forte-elastic
17s 5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
17s
[Bug] [DAC] Auto Gen Schema Fails on Certain Subqueries ES|QL Validation #115: Pull request #5256 synchronize by eric-forte-elastic
16s 5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
16s
[Bug] [DAC] Auto Gen Schema Fails on Certain Subqueries ES|QL Validation #114: Pull request #5256 synchronize by eric-forte-elastic
18s 5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
18s
[Bug] [DAC] Auto Gen Schema Fails on Certain Subqueries ES|QL Validation #113: Pull request #5256 synchronize by eric-forte-elastic
19s 5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
5255-bug-dac-auto-gen-schema-fails-on-certain-subqueries
19s
[New] Suspicious Kerberos Authentication Ticket Request ES|QL Validation #112: Pull request #5260 synchronize by Samirbous
15s kerb-unusual-client
kerb-unusual-client
15s
ProTip! You can narrow down the results and go further in time using created:<2025-10-29 or the other filters available.