Skip to content

Actions: elastic/detection-rules

Actions

REACT Tests Dispatcher

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
react-tests-dispatcher.yml
1,863 workflow runs
1,863 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New Rule] Potential Malware-Driven SSH Brute Force Attempt REACT Tests Dispatcher #115: Pull request #4474 synchronize by Aegrah
8s potential-brute-force-attack-infection
potential-brute-force-attack-infection
8s
[New Rule] High Number of Egress Network Connections from Unusual Executable REACT Tests Dispatcher #114: Pull request #4473 synchronize by Aegrah
9s c2-high-netcon-from-sus-location
c2-high-netcon-from-sus-location
9s
Modifications to PAD job descriptions, tactics and techniques REACT Tests Dispatcher #113: Pull request #4497 opened by mgarzon
10s add-new-ml-detection-rules
add-new-ml-detection-rules
10s
[New Rule] Unusual Remote File Creation REACT Tests Dispatcher #112: Pull request #4476 synchronize by shashank-elastic
12s unusual-remote-file-creation
unusual-remote-file-creation
12s
[New Rule] High Number of Egress Network Connections from Unusual Executable REACT Tests Dispatcher #111: Pull request #4473 synchronize by shashank-elastic
10s c2-high-netcon-from-sus-location
c2-high-netcon-from-sus-location
10s
[New Rules] Azure OpenAI REACT Tests Dispatcher #110: Pull request #3701 synchronize by shashank-elastic
9s initial_azure_llm_rules
initial_azure_llm_rules
9s
[New Rules] Azure OpenAI REACT Tests Dispatcher #109: Pull request #3701 synchronize by shashank-elastic
9s initial_azure_llm_rules
initial_azure_llm_rules
9s
[New Rules] Azure OpenAI REACT Tests Dispatcher #108: Pull request #3701 synchronize by shashank-elastic
10s initial_azure_llm_rules
initial_azure_llm_rules
10s
[Rule Tuning] Sysmon rules that uses event.action REACT Tests Dispatcher #107: Pull request #4496 opened by w0rk3r
11s rt_0
rt_0
11s
[New Rules] Azure OpenAI REACT Tests Dispatcher #106: Pull request #3701 synchronize by shashank-elastic
11s initial_azure_llm_rules
initial_azure_llm_rules
11s
[New Rules] Azure OpenAI REACT Tests Dispatcher #105: Pull request #3701 synchronize by shashank-elastic
11s initial_azure_llm_rules
initial_azure_llm_rules
11s
[New Rules] Azure OpenAI REACT Tests Dispatcher #104: Pull request #3701 synchronize by shashank-elastic
9s initial_azure_llm_rules
initial_azure_llm_rules
9s
[New Rules] Azure OpenAI REACT Tests Dispatcher #103: Pull request #3701 synchronize by shashank-elastic
11s initial_azure_llm_rules
initial_azure_llm_rules
11s
[Tuning] Remote File Copy to a Hidden Share REACT Tests Dispatcher #102: Pull request #4494 synchronize by Samirbous
9s Samirbous-patch-4
Samirbous-patch-4
9s
[Rule Tuning] MsBuild Making Network Connections REACT Tests Dispatcher #101: Pull request #4479 synchronize by w0rk3r
13s msbuild_rt
msbuild_rt
13s
[Rule Tuning] Adapt Rules to work with Sysmon REACT Tests Dispatcher #100: Pull request #4480 synchronize by w0rk3r
10s sysmon_rt
sysmon_rt
10s
[Tuning] Remote File Copy to a Hidden Share REACT Tests Dispatcher #99: Pull request #4494 synchronize by w0rk3r
10s Samirbous-patch-4
Samirbous-patch-4
10s
[Tuning] Remote File Copy to a Hidden Share REACT Tests Dispatcher #98: Pull request #4494 synchronize by Samirbous
13s Samirbous-patch-4
Samirbous-patch-4
13s
[Tuning] Potential Antimalware Scan Interface Bypass via PowerShell REACT Tests Dispatcher #97: Pull request #4477 synchronize by Samirbous
12s Samirbous-patch-1
Samirbous-patch-1
12s
[Tuning] Remote File Copy to a Hidden Share REACT Tests Dispatcher #96: Pull request #4494 synchronize by Samirbous
9s Samirbous-patch-4
Samirbous-patch-4
9s
[Tuning] Remote File Copy to a Hidden Share REACT Tests Dispatcher #95: Pull request #4494 opened by Samirbous
13s Samirbous-patch-4
Samirbous-patch-4
13s
[Tuning] Potential Evasion via Filter Manager REACT Tests Dispatcher #94: Pull request #4493 opened by Samirbous
12s Samirbous-patch-3
Samirbous-patch-3
12s
[Security Content] Basic EDR Setup Guides - Phase 1 REACT Tests Dispatcher #93: Pull request #4492 synchronize by w0rk3r
12s basic_edr_setup_2
basic_edr_setup_2
12s
[Security Content] Basic EDR Setup Guides - Phase 1 REACT Tests Dispatcher #92: Pull request #4492 synchronize by w0rk3r
10s basic_edr_setup_2
basic_edr_setup_2
10s
[Rule Tuning] Adjusting Investigation Guide for First Occurrence of Entra ID Auth via DeviceCode Protocol REACT Tests Dispatcher #91: Pull request #4490 synchronize by terrancedejesus
14s rule-tuning-adjusting-investigation-note-azure-device-code
rule-tuning-adjusting-investigation-note-azure-device-code
14s
ProTip! You can narrow down the results and go further in time using created:<2025-02-24 or the other filters available.