Skip to content

Actions: elastic/detection-rules

Actions

ES|QL Validation

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
esql-validation.yml
923 workflow runs
923 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Prep 9.2 ES|QL Validation #24: Pull request #5231 synchronize by shashank-elastic
21s prep_9.2
prep_9.2
21s
Prep 9.2 ES|QL Validation #23: Pull request #5231 synchronize by shashank-elastic
4m 52s prep_9.2
prep_9.2
4m 52s
Prep 9.2 ES|QL Validation #22: Pull request #5231 opened by shashank-elastic
4m 58s prep_9.2
prep_9.2
4m 58s
[Rule Tuning] Potential CVE-2025-32463 Sudo Chroot Execution Attempt ES|QL Validation #21: Pull request #5227 synchronize by Aegrah
21s cve-2025-32463-tuning
cve-2025-32463-tuning
21s
[Rule Tunings] AWS EC2 EBS Snapshot and Encryption Rules ES|QL Validation #20: Pull request #5229 opened by imays11
24s tune_aws_ebs_snapshot_rules
tune_aws_ebs_snapshot_rules
24s
[New Rule] Azure Compute Restore Point Collection Deleted ES|QL Validation #19: Pull request #5217 synchronize by terrancedejesus
21s terrancedejesus/issue5216
terrancedejesus/issue5216
21s
[New Rule] Azure Compute Restore Point Collection Deleted ES|QL Validation #18: Pull request #5217 synchronize by terrancedejesus
17s terrancedejesus/issue5216
terrancedejesus/issue5216
17s
[New Rule] Azure Compute Restore Point Collection Deleted ES|QL Validation #17: Pull request #5217 synchronize by terrancedejesus
20s terrancedejesus/issue5216
terrancedejesus/issue5216
20s
[New Rule] Azure Compute Restore Point Collection Deleted ES|QL Validation #16: Pull request #5217 synchronize by terrancedejesus
17s terrancedejesus/issue5216
terrancedejesus/issue5216
17s
[New Rule] Azure Storage Account Deletion ES|QL Validation #15: Pull request #5200 synchronize by terrancedejesus
16s terrancedejesus/issue5199
terrancedejesus/issue5199
16s
[Rule Tuning] Suspicious Entra ID OAuth User Impersonation Scope Detected ES|QL Validation #14: Pull request #5190 synchronize by terrancedejesus
15s terrancedejesus/issue5189
terrancedejesus/issue5189
15s
[New Rule] Entra ID Protection Admin Confirmed Compromise ES|QL Validation #13: Pull request #5186 synchronize by terrancedejesus
17s terrancedejesus/issue5185
terrancedejesus/issue5185
17s
[Rule Tuning] AWS User Created Access Keys For Another User ES|QL Validation #12: Pull request #5212 synchronize by imays11
4m 44s tune_aws_user_create_access_key
tune_aws_user_create_access_key
4m 44s
[Rule Tuning][New BBR Rule] AWS Sign-In Token Creation and Console Login ES|QL Validation #11: Pull request #5197 synchronize by imays11
19s tune_federated_console_login_no_mfa
tune_federated_console_login_no_mfa
19s
[Rule Tunings] AWS IAM Administrator Access Policy Attached to Group/Role/User ES|QL Validation #10: Pull request #5215 synchronize by imays11
20s tune_aws_attach_administrator_access_policy
tune_aws_attach_administrator_access_policy
20s
[Rule Tuning] AWS User Created Access Keys For Another User ES|QL Validation #9: Pull request #5212 synchronize by imays11
5m 42s tune_aws_user_create_access_key
tune_aws_user_create_access_key
5m 42s
[Rule Tuning][New BBR Rule] AWS Sign-In Token Creation and Console Login ES|QL Validation #8: Pull request #5197 synchronize by imays11
15s tune_federated_console_login_no_mfa
tune_federated_console_login_no_mfa
15s
[Rule Tunings] AWS IAM Administrator Access Policy Attached to Group/Role/User ES|QL Validation #7: Pull request #5215 synchronize by imays11
16s tune_aws_attach_administrator_access_policy
tune_aws_attach_administrator_access_policy
16s
[New Rule] Azure Storage Blob Retrieval via AzCopy ES|QL Validation #5: Pull request #5179 synchronize by terrancedejesus
23s terrancedejesus/issue5178
terrancedejesus/issue5178
23s
[New Rule] Azure Compute Restore Point Collection Deleted ES|QL Validation #4: Pull request #5217 synchronize by terrancedejesus
16s terrancedejesus/issue5216
terrancedejesus/issue5216
16s
[New Rule] Azure Storage Account Deletion ES|QL Validation #3: Pull request #5200 synchronize by terrancedejesus
17s terrancedejesus/issue5199
terrancedejesus/issue5199
17s
[Rule Tuning] Suspicious Entra ID OAuth User Impersonation Scope Detected ES|QL Validation #2: Pull request #5190 synchronize by terrancedejesus
22s terrancedejesus/issue5189
terrancedejesus/issue5189
22s
Use env rather than variables ES|QL Validation #1: Commit df9e285 pushed by eric-forte-elastic
Failure esql-field-validation
esql-field-validation
Failure
ProTip! You can narrow down the results and go further in time using created:<2025-10-09 or the other filters available.