security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enhance Setup Guide information (#3256)

Browse Source 
(cherry picked from commit d52546eee5)
This commit is contained in:
shashank-elastic
2023-11-03 19:05:29 +05:30
committed by github-actions[bot]
parent 39346f4b5b
commit 9c271c6591
122 changed files with 1264 additions and 1330 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/linux/privilege_escalation_suspicious_cap_setuid_python_execution.toml
+1 -2
View File
@@ -24,8 +24,7 @@ risk_score = 47
rule_id = "a0ddb77b-0318-41f0-91e4-8c1b5528834f"
setup = """
This rule requires data coming in from one of the following integrations:
- Elastic Defend
This rule requires data coming in from Elastic Defend.
### Elastic Defend Integration Setup
Elastic Defend is integrated into the Elastic Agent using Fleet. Upon configuration, the integration allows