Skip to content

Actions: elastic/detection-rules

Actions

ES|QL Validation

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
esql-validation.yml
950 workflow runs
950 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #805: Pull request #5352 synchronize by Mikaayenson
15s additional_genai_coverage
additional_genai_coverage
15s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #804: Pull request #5352 synchronize by Mikaayenson
18s additional_genai_coverage
additional_genai_coverage
18s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #803: Pull request #5352 synchronize by Mikaayenson
16s additional_genai_coverage
additional_genai_coverage
16s
[Rule Tuning] AWS KMS Customer Managed Key Disabled or Scheduled for Deletion ES|QL Validation #802: Pull request #5417 opened by imays11
16s tune_aws_kms_key_deletion
tune_aws_kms_key_deletion
16s
[New Rule] React2Shell Detection ES|QL Validation #801: Pull request #5408 synchronize by terrancedejesus
15s terrancedejesus/issue5406
terrancedejesus/issue5406
15s
[New Rule] React2Shell Detection ES|QL Validation #800: Pull request #5408 synchronize by terrancedejesus
16s terrancedejesus/issue5406
terrancedejesus/issue5406
16s
[New Rule] React2Shell Detection ES|QL Validation #799: Pull request #5408 synchronize by terrancedejesus
17s terrancedejesus/issue5406
terrancedejesus/issue5406
17s
[Rule Tuning] AWS STS AssumeRoot by Rare User and Member Account ES|QL Validation #798: Pull request #5398 synchronize by imays11
30s aws_assume_root_tune
aws_assume_root_tune
30s
[New Rule] React2Shell Detection ES|QL Validation #797: Pull request #5408 synchronize by terrancedejesus
15s terrancedejesus/issue5406
terrancedejesus/issue5406
15s
[New Rule] React2Shell Detection ES|QL Validation #796: Pull request #5408 synchronize by terrancedejesus
17s terrancedejesus/issue5406
terrancedejesus/issue5406
17s
[New Rule] React2Shell Detection ES|QL Validation #795: Pull request #5408 synchronize by terrancedejesus
32s terrancedejesus/issue5406
terrancedejesus/issue5406
32s
[New Rule] React2Shell Detection ES|QL Validation #794: Pull request #5408 synchronize by terrancedejesus
32s terrancedejesus/issue5406
terrancedejesus/issue5406
32s
[New Rule] React2Shell Detection ES|QL Validation #793: Pull request #5408 synchronize by terrancedejesus
19s terrancedejesus/issue5406
terrancedejesus/issue5406
19s
[Rule Tuning] AWS S3 Object Encryption Using External KMS Key ES|QL Validation #792: Pull request #5399 synchronize by imays11
5m 8s tune_aws_external_kms_key_s3_copy
tune_aws_external_kms_key_s3_copy
5m 8s
[Rule Tuning] AWS Access Token Used from Multiple Addresses ES|QL Validation #791: Pull request #5412 synchronize by imays11
5m 6s tune_aws_multiple_ips
tune_aws_multiple_ips
5m 6s
[Rule Tunings] AWS Multiple API Calls ESQL rules ES|QL Validation #790: Pull request #5238 synchronize by imays11
5m 2s tune_aws_multi_region_rules
tune_aws_multi_region_rules
5m 2s
[New Rule] React2Shell Detection ES|QL Validation #789: Pull request #5408 synchronize by terrancedejesus
16s terrancedejesus/issue5406
terrancedejesus/issue5406
16s
[Rule Tuning] Interval fix + Datastream values to ESQL Rules ES|QL Validation #788: Pull request #5413 synchronize by Aegrah
5m 4s web-server-esql-rule-tuning
web-server-esql-rule-tuning
5m 4s
[Tuning] Potential Masquerading as Svchost" ES|QL Validation #787: Pull request #5416 opened by Samirbous
7m 1s Samirbous-patch-1
Samirbous-patch-1
7m 1s
[Rule Tuning] Update PowerShell ES|QL Rules KEEP Condition ES|QL Validation #786: Pull request #5391 synchronize by Aegrah
6m 6s rt_5
rt_5
6m 6s
[Tuning] Rare Connection to WebDAV Target ES|QL Validation #785: Pull request #5415 synchronize by Samirbous
6m 43s Samirbous-patch-3
Samirbous-patch-3
6m 43s
[Tuning] Rare Connection to WebDAV Target ES|QL Validation #784: Pull request #5415 opened by Samirbous
4m 28s Samirbous-patch-3
Samirbous-patch-3
4m 28s
[Tuning] Suspicious React Child Process ES|QL Validation #783: Pull request #5414 synchronize by Samirbous
19s Samirbous-patch-1
Samirbous-patch-1
19s
[Tuning] Suspicious React Child Process ES|QL Validation #782: Pull request #5414 synchronize by Samirbous
16s Samirbous-patch-1
Samirbous-patch-1
16s
[Tuning] Suspicious React Child Process ES|QL Validation #781: Pull request #5414 synchronize by Samirbous
17s Samirbous-patch-1
Samirbous-patch-1
17s