Skip to content

Actions: elastic/detection-rules

Actions

REACT Tests Dispatcher

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
react-tests-dispatcher.yml
1,866 workflow runs
1,866 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[Rule Tuning] Backup Deletion with Wbadmin REACT Tests Dispatcher #543: Pull request #4715 synchronize by shashank-elastic
10s rt_3
rt_3
10s
[Rule Tuning] Backup Deletion with Wbadmin REACT Tests Dispatcher #542: Pull request #4715 synchronize by w0rk3r
9s rt_3
rt_3
9s
[Rule Tuning] Backup Deletion with Wbadmin REACT Tests Dispatcher #541: Pull request #4715 opened by w0rk3r
12s rt_3
rt_3
12s
[Rule Tuning] Unusual Scheduled Task Update REACT Tests Dispatcher #540: Pull request #4714 opened by w0rk3r
9s rt_2
rt_2
9s
[Rule Tuning] Unusual File Creation - Alternate Data Stream REACT Tests Dispatcher #539: Pull request #4712 opened by w0rk3r
10s rt_1
rt_1
10s
[Rule Tuning] Startup or Run Key Registry Modification REACT Tests Dispatcher #538: Pull request #4710 opened by w0rk3r
13s rt_0
rt_0
13s
[New Rule] Unusual Exim4 Child Process REACT Tests Dispatcher #537: Pull request #4684 synchronize by shashank-elastic
9s exim-child-process
exim-child-process
9s
[New Rule] Unusual Execution from Kernel Thread (kthreadd) Parent REACT Tests Dispatcher #536: Pull request #4683 synchronize by shashank-elastic
10s unusual-kthread-execution
unusual-kthread-execution
10s
[New Rule] Linux Telegram API Request REACT Tests Dispatcher #535: Pull request #4677 synchronize by shashank-elastic
10s new-rule-telegram-api-request
new-rule-telegram-api-request
10s
[Rule Tuning] Reduce Severity from Critical to High REACT Tests Dispatcher #534: Pull request #4637 synchronize by shashank-elastic
12s rt_critical_decrease
rt_critical_decrease
12s
[New Rule] Unusual LD_PRELOAD/LD_LIBRARY_PATH Command Line Arguments REACT Tests Dispatcher #533: Pull request #4685 synchronize by shashank-elastic
12s unusual-ld-preload-cli
unusual-ld-preload-cli
12s
[New Rule] Potential Dynamic IEX Reconstruction via Environment Variables REACT Tests Dispatcher #532: Pull request #4633 synchronize by shashank-elastic
10s posh_esql_12
posh_esql_12
10s
[New Rule] Potential Dynamic IEX Reconstruction via Environment Variables REACT Tests Dispatcher #531: Pull request #4633 synchronize by shashank-elastic
12s posh_esql_12
posh_esql_12
12s
[New Rule] Potential PowerShell Obfuscation via Special Character Overuse REACT Tests Dispatcher #530: Pull request #4632 synchronize by shashank-elastic
9s posh_esql_11
posh_esql_11
9s
[New Rule] Potential PowerShell Obfuscation via High Numeric Character Proportion REACT Tests Dispatcher #529: Pull request #4631 synchronize by shashank-elastic
11s posh_esql_10
posh_esql_10
11s
[New Rule] Potential PowerShell Obfuscation via Backtick-Escaped Variable Expansion REACT Tests Dispatcher #528: Pull request #4630 synchronize by shashank-elastic
10s posh_esql_9
posh_esql_9
10s
[New Rule] Potential PowerShell Obfuscation via Concatenated Dynamic Command Invocation REACT Tests Dispatcher #527: Pull request #4615 synchronize by shashank-elastic
9s posh_esql_7
posh_esql_7
9s
[New Rule] Potential PowerShell Obfuscation via Invalid Escape Sequences REACT Tests Dispatcher #526: Pull request #4614 synchronize by shashank-elastic
8s posh_esql_6
posh_esql_6
8s
[New Rule] PowerShell Obfuscation via Negative Index String Reversal REACT Tests Dispatcher #525: Pull request #4610 synchronize by shashank-elastic
9s posh_esql_5
posh_esql_5
9s
[New Rule] Potential PowerShell Obfuscation via Reverse Keywords REACT Tests Dispatcher #524: Pull request #4609 synchronize by shashank-elastic
12s posh_esql_4
posh_esql_4
12s
[New Rule] Potential PowerShell Obfuscation via Character Array Reconstruction REACT Tests Dispatcher #523: Pull request #4608 synchronize by shashank-elastic
12s posh_esql_3
posh_esql_3
12s
[New Rule] Potential PowerShell Obfuscation via String Concatenation REACT Tests Dispatcher #522: Pull request #4607 synchronize by shashank-elastic
10s posh_esql_2
posh_esql_2
10s
[New Rule] System Binary Symlink to Suspicious Location REACT Tests Dispatcher #521: Pull request #4682 synchronize by shashank-elastic
11s new-rule-symlink-to-sus-location
new-rule-symlink-to-sus-location
11s
[New Rule] Suspicious Named Pipe Creation REACT Tests Dispatcher #520: Pull request #4681 synchronize by shashank-elastic
12s named-pipe-creation
named-pipe-creation
12s
[New Rule] Suspicious Kernel Feature Activity REACT Tests Dispatcher #519: Pull request #4676 synchronize by shashank-elastic
13s new-rule-sus-kernel-feature-activity
new-rule-sus-kernel-feature-activity
13s
ProTip! You can narrow down the results and go further in time using created:<2025-05-06 or the other filters available.