security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Tuning] Update min_stack for container rules new ecs field (#3370)

Browse Source 
* Update privilege_escalation_mount_launched_inside_a_privileged_container.toml

update min_stack and comments

* Update privilege_escalation_debugfs_launched_inside_a_privileged_container.toml

update min_stack and comments

(cherry picked from commit a0f82c3f12)
This commit is contained in:
Isai
2024-01-05 18:42:42 -05:00
committed by github-actions[bot]
parent d7cc37993d
commit 92ed682a51
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/cloud_defend/privilege_escalation_debugfs_launched_inside_a_privileged_container.toml
+3 -3
View File
@@ -2,9 +2,9 @@
creation_date = "2023/10/26"
integration = ["cloud_defend"]
maturity = "production"
min_stack_comments = "New Integration: Cloud Defend"
min_stack_version = "8.8.0"
updated_date = "2023/12/18"
min_stack_comments = "New field added to ecs : container.security_context.privileged"
min_stack_version = "8.10.0"
updated_date = "2024/01/05"
[rule]
author = ["Elastic"]
rules/integrations/cloud_defend/privilege_escalation_mount_launched_inside_a_privileged_container.toml
+3 -3
View File
@@ -2,9 +2,9 @@
creation_date = "2023/10/26"
integration = ["cloud_defend"]
maturity = "production"
min_stack_comments = "New Integration: Cloud Defend"
min_stack_version = "8.8.0"
updated_date = "2023/12/18"
min_stack_comments = "New field added to ecs : container.security_context.privileged"
min_stack_version = "8.10.0"
updated_date = "2024/01/05"
[rule]
author = ["Elastic"]