security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Security Content] Small tweaks on the setup guides (#3308)

Browse Source 
* [Security Content] Small tweaks on the setup guides

* Additional Fixes

* Avoid touching deprecated rules
This commit is contained in:
Jonhnathan
2024-03-11 09:09:40 -03:00
committed by GitHub
parent edf4da8526
commit 458e67918a
477 changed files with 576 additions and 871 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/linux/execution_potential_hack_tool_executed.toml
+1 -2
View File
@@ -20,7 +20,7 @@ license = "Elastic License v2"
name = "Potential Linux Hack Tool Launched"
risk_score = 47
rule_id = "1df1152b-610a-4f48-9d7a-504f6ee5d9da"
setup = """
setup = """## Setup
This rule requires data coming in from Elastic Defend.
@@ -45,7 +45,6 @@ For more details on Elastic Agent configuration settings, refer to the [helper g
- Click "Save and Continue".
- To complete the integration, select "Add Elastic Agent to your hosts" and continue to the next section to install the Elastic Agent on your hosts.
For more details on Elastic Defend refer to the [helper guide](https://www.elastic.co/guide/en/security/current/install-endpoint.html).
"""
severity = "medium"
timestamp_override = "event.ingested"