Skip to content

Actions: elastic/detection-rules

Actions

REACT Tests Dispatcher

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
react-tests-dispatcher.yml
1,863 workflow runs
1,863 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New Rule] Successful SSH Authentication from Unusual SSH Public Key REACT Tests Dispatcher #65: Pull request #4478 opened by Aegrah
12s new-public-key-authentication
new-public-key-authentication
12s
[Tuning] Potential Antimalware Scan Interface Bypass via PowerShell REACT Tests Dispatcher #64: Pull request #4477 opened by Samirbous
11s Samirbous-patch-1
Samirbous-patch-1
11s
[New Rule] Adding Coverage for M365 OneDrive Excessive File Downloads with OAuth Token REACT Tests Dispatcher #62: Pull request #4469 synchronize by terrancedejesus
9s new-rule-m365-onedrive-excessive-download-attempts
new-rule-m365-onedrive-excessive-download-attempts
9s
[New Hunt] Adding Hunting Queries for AWS SNS exfiltration and data collection REACT Tests Dispatcher #61: Pull request #4458 synchronize by terrancedejesus
11s new-hunt-aws-sns-exfil-phishing
new-hunt-aws-sns-exfil-phishing
11s
[New Rule] Adding Coverage for M365 OneDrive Excessive File Downloads with OAuth Token REACT Tests Dispatcher #60: Pull request #4469 synchronize by terrancedejesus
13s new-rule-m365-onedrive-excessive-download-attempts
new-rule-m365-onedrive-excessive-download-attempts
13s
[New Hunt] Adding Hunting Queries for AWS SNS exfiltration and data collection REACT Tests Dispatcher #59: Pull request #4458 synchronize by terrancedejesus
10s new-hunt-aws-sns-exfil-phishing
new-hunt-aws-sns-exfil-phishing
10s
[Rule Tuning] Expanding coverage for First Occurrence of Entra ID Auth via DeviceCode Protocol REACT Tests Dispatcher #58: Pull request #4466 synchronize by terrancedejesus
13s rule-tuning-azure-entra-id-sign-in-device-code-phishing
rule-tuning-azure-entra-id-sign-in-device-code-phishing
13s
[New Rule] Adding Coverage for M365 OneDrive Excessive File Downloads with OAuth Token REACT Tests Dispatcher #57: Pull request #4469 synchronize by terrancedejesus
10s new-rule-m365-onedrive-excessive-download-attempts
new-rule-m365-onedrive-excessive-download-attempts
10s
[New Rule] Adding Coverage for AWS SNS Topic Created by Rare User REACT Tests Dispatcher #56: Pull request #4455 synchronize by terrancedejesus
9s new-rule-aws-sns-create-topic
new-rule-aws-sns-create-topic
9s
[New Rule] Adding Coverage for M365 OneDrive Excessive File Downloads with OAuth Token REACT Tests Dispatcher #55: Pull request #4469 synchronize by terrancedejesus
13s new-rule-m365-onedrive-excessive-download-attempts
new-rule-m365-onedrive-excessive-download-attempts
13s
[New Rule] Adding Coverage for M365 OneDrive Excessive File Downloads with OAuth Token REACT Tests Dispatcher #54: Pull request #4469 synchronize by terrancedejesus
11s new-rule-m365-onedrive-excessive-download-attempts
new-rule-m365-onedrive-excessive-download-attempts
11s
[Rule Tuning] Expanding coverage for First Occurrence of Entra ID Auth via DeviceCode Protocol REACT Tests Dispatcher #53: Pull request #4466 synchronize by terrancedejesus
11s rule-tuning-azure-entra-id-sign-in-device-code-phishing
rule-tuning-azure-entra-id-sign-in-device-code-phishing
11s
[New Rule] Potential Malware-Driven SSH Brute Force Attempt REACT Tests Dispatcher #52: Pull request #4474 synchronize by Aegrah
10s potential-brute-force-attack-infection
potential-brute-force-attack-infection
10s
[New Rule] High Number of Egress Network Connections from Unusual Executable REACT Tests Dispatcher #51: Pull request #4473 synchronize by Aegrah
11s c2-high-netcon-from-sus-location
c2-high-netcon-from-sus-location
11s
[New Rule] Unusual Remote File Creation REACT Tests Dispatcher #50: Pull request #4476 synchronize by Aegrah
14s unusual-remote-file-creation
unusual-remote-file-creation
14s
[New Rule] Remote File Creation in World Writeable Directory REACT Tests Dispatcher #49: Pull request #4475 synchronize by Aegrah
11s remote-file-creation-on-world-writeable-dir
remote-file-creation-on-world-writeable-dir
11s
[New Rule] Unusual Remote File Creation REACT Tests Dispatcher #48: Pull request #4476 opened by Aegrah
12s unusual-remote-file-creation
unusual-remote-file-creation
12s
[New Rule] Remote File Creation in World Writeable Directory REACT Tests Dispatcher #47: Pull request #4475 synchronize by Aegrah
13s remote-file-creation-on-world-writeable-dir
remote-file-creation-on-world-writeable-dir
13s
[New Rule] Remote File Creation in World Writeable Directory REACT Tests Dispatcher #46: Pull request #4475 synchronize by Aegrah
14s remote-file-creation-on-world-writeable-dir
remote-file-creation-on-world-writeable-dir
14s
[New Rule] Remote File Creation in World Writeable Directory REACT Tests Dispatcher #45: Pull request #4475 opened by Aegrah
10s remote-file-creation-on-world-writeable-dir
remote-file-creation-on-world-writeable-dir
10s
[New Rule] Potential Malware-Driven SSH Brute Force Attempt REACT Tests Dispatcher #44: Pull request #4474 synchronize by Aegrah
8s potential-brute-force-attack-infection
potential-brute-force-attack-infection
8s
[New Rule] High Number of Egress Network Connections from Unusual Executable REACT Tests Dispatcher #43: Pull request #4473 synchronize by Aegrah
11s c2-high-netcon-from-sus-location
c2-high-netcon-from-sus-location
11s
[New Rule] Potential Malware-Driven SSH Brute Force Attempt REACT Tests Dispatcher #42: Pull request #4474 opened by Aegrah
13s potential-brute-force-attack-infection
potential-brute-force-attack-infection
13s
[New Rule] High Number of Egress Network Connections from Unusual Executable REACT Tests Dispatcher #41: Pull request #4473 opened by Aegrah
8s c2-high-netcon-from-sus-location
c2-high-netcon-from-sus-location
8s
[New Rule] Adding Coverage for AWS SNS Topic Created by Rare User REACT Tests Dispatcher #40: Pull request #4455 synchronize by terrancedejesus
8s new-rule-aws-sns-create-topic
new-rule-aws-sns-create-topic
8s
ProTip! You can narrow down the results and go further in time using created:<2025-02-19 or the other filters available.