Skip to content

Pull requests: elastic/detection-rules

New pull request New
45 Open 2,523 Closed
45 Open 2,523 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[Tuning] Updated references backport: auto Domain: Endpoint OS: Linux Rule: Tuning tweaking or tuning an existing rule Team: TRADE
#4114 opened Sep 30, 2024 by Aegrah Loading…
@Aegrah
1
react_sync_rta_updates_4098 backport: auto RTA work on RTA framework
#4113 opened Sep 30, 2024 by protectionsmachine Loading…
[Tuning] Suspicious .NET Reflection via PowerShell backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4112 opened Sep 30, 2024 by Samirbous Loading…
@Samirbous
1
react_sync_rta_updates_4099 backport: auto RTA work on RTA framework
#4110 opened Sep 27, 2024 by protectionsmachine Loading…
react_sync_rta_updates_4102 backport: auto RTA work on RTA framework
#4109 opened Sep 27, 2024 by protectionsmachine Loading…
react_sync_rta_updates_4105 backport: auto RTA work on RTA framework
#4108 opened Sep 27, 2024 by protectionsmachine Loading…
react_sync_rta_updates_4096 backport: auto RTA work on RTA framework
#4107 opened Sep 27, 2024 by protectionsmachine Loading…
Expand elasticsearch Version Dependency to <=8.16.0,>=8.12.1 python Internal python for the repository
#4098 opened Sep 23, 2024 by terrancedejesus • Draft
5 tasks
Add testcase to check for related_integrations based on index backport: auto bbr Building Block Rules Domain: Endpoint enhancement New feature or request OS: Windows windows related rules python Internal python for the repository Rule: Tuning tweaking or tuning an existing rule schema
#4096 opened Sep 23, 2024 by shashank-elastic Loading…
1 of 5 tasks
1
@shashank-elastic
5
[FR][DAC] Import Rules Verbose Message backport: auto detections-as-code enhancement New feature or request python Internal python for the repository
#4093 opened Sep 20, 2024 by eric-forte-elastic Loading…
1 task
1
@eric-forte-elastic
2
Revert "[Bug] Handle formatting empty list" backport: auto python Internal python for the repository
#4087 opened Sep 17, 2024 by brokensound77 Loading…
3
[Hunting] Re-factor Hunting Library Code backport: auto python Internal python for the repository schema threat hunting Related to hunting/ library.
#4085 opened Sep 17, 2024 by terrancedejesus Loading…
4 of 5 tasks
@terrancedejesus
32
[Rule Tuning] 3rd Party EDR Compatibility - 18 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4056 opened Sep 5, 2024 by w0rk3r Loading…
1
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 17 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4042 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
3
[Rule Tuning] 3rd Party EDR Compatibility - 16 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4041 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
3
[Rule Tuning] 3rd Party EDR Compatibility - 15 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4040 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
2
[Rule Tuning] 3rd Party EDR Compatibility - 14 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4039 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 13 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4038 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 12 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4037 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
2
[Rule Tuning] 3rd Party EDR Compatibility - 11 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4036 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 10 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4035 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 9 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4034 opened Aug 29, 2024 by w0rk3r Loading…
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 8 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4032 opened Aug 28, 2024 by w0rk3r Loading…
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 7 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4031 opened Aug 28, 2024 by w0rk3r Loading…
@w0rk3r
1
[Rule Tuning] 3rd Party EDR Compatibility - 6 backport: auto Domain: Endpoint OS: Windows windows related rules Rule: Tuning tweaking or tuning an existing rule
#4030 opened Aug 28, 2024 by w0rk3r Loading…
@w0rk3r
1
ProTip! Updated in the last three days: updated:>2024-09-27.