security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enhance Setup Guide information (#3256)

Browse Source
This commit is contained in:
shashank-elastic
2023-11-03 19:05:29 +05:30
committed by GitHub
parent 829f5ea885
commit d52546eee5
122 changed files with 1264 additions and 1330 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/linux/execution_potential_hack_tool_executed.toml
+1 -2
View File
@@ -22,8 +22,7 @@ risk_score = 47
rule_id = "1df1152b-610a-4f48-9d7a-504f6ee5d9da"
setup = """
This rule requires data coming in from one of the following integrations:
- Elastic Defend
This rule requires data coming in from Elastic Defend.
### Elastic Defend Integration Setup
Elastic Defend is integrated into the Elastic Agent using Fleet. Upon configuration, the integration allows