Skip to content

Actions: elastic/detection-rules

Actions

ES|QL Validation

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
esql-validation.yml
953 workflow runs
953 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New Rule] AWS EC2 LOLBin Execution via SSM ES|QL Validation #758: Pull request #5354 synchronize by terrancedejesus
5m 25s terrancedejesus/issue5353
terrancedejesus/issue5353
5m 25s
[New Rule] React2Shell Detection ES|QL Validation #757: Pull request #5408 synchronize by terrancedejesus
1m 54s terrancedejesus/issue5406
terrancedejesus/issue5406
1m 54s
[New Rule] Wiz Defend Promotion Alerts ES|QL Validation #756: Pull request #5410 opened by terrancedejesus
1m 53s terrancedejesus/issue5409
terrancedejesus/issue5409
1m 53s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #755: Pull request #5352 synchronize by Mikaayenson
18s additional_genai_coverage
additional_genai_coverage
18s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #754: Pull request #5352 synchronize by Mikaayenson
22s additional_genai_coverage
additional_genai_coverage
22s
[New Rule] React2Shell Detection ES|QL Validation #753: Pull request #5408 synchronize by terrancedejesus
16s terrancedejesus/issue5406
terrancedejesus/issue5406
16s
[New Rule] React2Shell Detection ES|QL Validation #752: Pull request #5408 synchronize by terrancedejesus
17s terrancedejesus/issue5406
terrancedejesus/issue5406
17s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #751: Pull request #5352 synchronize by Mikaayenson
24s additional_genai_coverage
additional_genai_coverage
24s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #750: Pull request #5352 synchronize by Mikaayenson
19s additional_genai_coverage
additional_genai_coverage
19s
[New Rule] React2Shell Detection ES|QL Validation #749: Pull request #5408 opened by terrancedejesus
19s terrancedejesus/issue5406
terrancedejesus/issue5406
19s
[New] Suspicious React Server Child Process ES|QL Validation #748: Pull request #5407 synchronize by Samirbous
24s react_childproc
react_childproc
24s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #747: Pull request #5352 synchronize by Mikaayenson
16s additional_genai_coverage
additional_genai_coverage
16s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #746: Pull request #5352 synchronize by Mikaayenson
17s additional_genai_coverage
additional_genai_coverage
17s
[New] Suspicious React Server Child Process ES|QL Validation #745: Pull request #5407 opened by Samirbous
18s react_childproc
react_childproc
18s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #744: Pull request #5352 synchronize by Mikaayenson
17s additional_genai_coverage
additional_genai_coverage
17s
[New] Multiple Cloud Secrets Accessed by Source Address ES|QL Validation #743: Pull request #5388 synchronize by Samirbous
6m 43s multi-ds-secrets-access
multi-ds-secrets-access
6m 43s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #742: Pull request #5352 synchronize by Mikaayenson
17s additional_genai_coverage
additional_genai_coverage
17s
[Rule Tunings] AWS S3 Bucket Replicated to Another Account | AWS S3 Bucket Policy Added to Share with External Account ES|QL Validation #741: Pull request #5405 opened by imays11
33s aws_tune_bucket_replication
aws_tune_bucket_replication
33s
[New Rule] Web Server Potential Remote File Inclusion Activity ES|QL Validation #740: Pull request #5394 synchronize by Aegrah
3m 46s new-rule-potential-rfi
new-rule-potential-rfi
3m 46s
[New Rule] Web Server Local File Inclusion Activity ES|QL Validation #739: Pull request #5393 synchronize by Aegrah
5m 59s new-rule-potential-lfi-request
new-rule-potential-lfi-request
5m 59s
[New Rule] Potential HTTP Downgrade Attack ES|QL Validation #738: Pull request #5372 synchronize by Aegrah
17s potential-http-downgrade-attack
potential-http-downgrade-attack
17s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #737: Pull request #5352 synchronize by Mikaayenson
20s additional_genai_coverage
additional_genai_coverage
20s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #736: Pull request #5352 synchronize by Mikaayenson
16s additional_genai_coverage
additional_genai_coverage
16s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #735: Pull request #5352 synchronize by Mikaayenson
16s additional_genai_coverage
additional_genai_coverage
16s
[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules ES|QL Validation #734: Pull request #5352 synchronize by Mikaayenson
15s additional_genai_coverage
additional_genai_coverage
15s