elastic/detection-rules

#4611

· beninsh opened

on Apr 15, 2025

[Rule Tuning] Suspicious Execution from a Mounted Device

community

Rule: Tuning

Team: TRADE

#4603

· kenza-ab opened

on Apr 10, 2025

[FR] Include Timeline Templates export/import in the CLI such that they can be imported and exported together with rules like exceptions and action connectors

community

enhancement

Team: TRADE

#4588

· frederikb96 opened

on Apr 1, 2025

[FR] Update Detection Rules MITRE Workflow to SHA Pin

enhancement

Team: TRADE

Enhancement

#4580

· eric-forte-elastic opened

on Mar 28, 2025

[FR] Add a Flag to Drop creation_date and updated_date when Importing Rules

#4578

· eric-forte-elastic opened

on Mar 28, 2025

[FR] Add Kibana Action Connectors to Existing Exception List Workaround

#4577

· eric-forte-elastic opened

on Mar 28, 2025

[FR] Handle Cases Where Kibana Duplicates Action Connectors

#4576

· eric-forte-elastic opened

on Mar 28, 2025

[Bug] Using the CLI to export esql (ES|QL) rules from Kibana results in ValidationError if using metadata according to documentation

bug

community

Team: TRADE

#4575

· frederikb96 opened

on Mar 27, 2025

[Bug] CLI detection_rules kibana import-rules imports all exceptions and connectors if --rule-file or --rule-id is set

bug

community

Team: TRADE

#4574

· frederikb96 opened

on Mar 27, 2025

[Bug] Creating New Terms via CLI

bug

Team: TRADE

#4566

· eric-forte-elastic opened

on Mar 26, 2025

[FR] Update schemas to support is_customized

#4561

· Mikaayenson opened

on Mar 25, 2025

[FR] GitHub URL inside rule description that points to GitHub location

community

enhancement

Team: TRADE

#4560

· CyberneticNomad-v808 opened

on Mar 25, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Rule Tuning] Potential DLL Side-Loading via Trusted Microsoft Programs

[Rule Tuning] Suspicious Execution from a Mounted Device

[FR] Include Timeline Templates export/import in the CLI such that they can be imported and exported together with rules like exceptions and action connectors

[FR] Update Detection Rules MITRE Workflow to SHA Pin

[FR] Add a Flag to Drop creation_date and updated_date when Importing Rules

[FR] Add Kibana Action Connectors to Existing Exception List Workaround

[FR] Handle Cases Where Kibana Duplicates Action Connectors

[Bug] Using the CLI to export esql (ES|QL) rules from Kibana results in ValidationError if using metadata according to documentation

[Bug] CLI detection_rules kibana import-rules imports all exceptions and connectors if --rule-file or --rule-id is set

[Bug] Creating New Terms via CLI

[FR] Update schemas to support is_customized

[FR] GitHub URL inside rule description that points to GitHub location

Issues

Search results