security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Tune Rules that have unsupported versions in min_stack_version (#5079)

Browse Source
This commit is contained in:
shashank-elastic
2025-09-10 19:43:28 +05:30
committed by GitHub
parent 392e0253c3
commit c6406e97c2
3 changed files with 3 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml
+1 -3
View File
@@ -2,9 +2,7 @@
creation_date = "2024/11/04"
integration = ["aws"]
maturity = "production"
min_stack_comments = "New fields added: actor.entity.id and target.entity.id"
min_stack_version = "8.16.5"
updated_date = "2025/09/08"
updated_date = "2025/10/10"
[rule]
author = ["Elastic"]
rules/integrations/aws/privilege_escalation_iam_update_assume_role_policy.toml
+1 -3
View File
@@ -2,9 +2,7 @@
creation_date = "2020/07/06"
integration = ["aws"]
maturity = "production"
min_stack_comments = "New fields added: actor.entity.id and target.entity.id"
min_stack_version = "8.16.5"
updated_date = "2025/07/10"
updated_date = "2025/10/10"
[rule]
author = ["Elastic"]
rules/integrations/azure/credential_access_entra_id_brute_force_activity.toml
+1 -3
View File
@@ -2,9 +2,7 @@
creation_date = "2024/09/06"
integration = ["azure"]
maturity = "production"
min_stack_comments = "Elastic ESQL values aggregation is more performant in 8.16.5 and above."
min_stack_version = "8.17.0"
updated_date = "2025/07/16"
updated_date = "2025/10/10"
[rule]
author = ["Elastic"]