 Jonhnathan
|
d3aa4b2f38
|
[Rule Tuning] Reduce Severity from Critical to High (#4637)
|
2025-05-06 21:37:47 +05:30 |
|
|
Jonhnathan
|
364d9dd3bc
|
[New Rule] Threat Intel Email Indicator Match (#4598)
* [New Rule] Threat Intel Email Indicator Match
* Update threat_intel_indicator_match_email.toml
* Update pyproject.toml
* Adds IG
* Update rules/threat_intel/threat_intel_indicator_match_email.toml
* Update rules/threat_intel/threat_intel_indicator_match_email.toml
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>
* Update rules/threat_intel/threat_intel_indicator_match_email.toml
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>
---------
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>
|
2025-04-22 12:15:36 -03:00 |
|
|
shashank-elastic
|
2b3095a13c
|
Update Max signals value to supported limits (#4556)
|
2025-03-27 09:02:25 +05:30 |
|
|
shashank-elastic
|
059d7efa25
|
Prep for Release 9.0 (#4550)
|
2025-03-20 20:32:07 +05:30 |
|
|
shashank-elastic
|
818467f132
|
Replace master doc URLs with current (#4439)
|
2025-02-03 21:27:50 +05:30 |
|
|
Mika Ayenson
|
fe8c81d762
|
[FR] Generate investigation guides (#4358)
|
2025-01-22 11:17:38 -06:00 |
|
|
shashank-elastic
|
2ee5ae1f19
|
Fix Version Bump for Related Integrations (#3960)
|
2024-08-06 18:48:24 +05:30 |
|
|
Krishna Chaitanya Reddy Burri
|
e9d7ddfa35
|
[Rule Tuning]: Fix threat_index and filters in Rapid7 CVE rule (#3800)
* Fix index and filters in Rapid7 CVE rule
* change updated date
---------
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
|
2024-06-20 15:17:06 -04:00 |
|
|
Terrance DeJesus
|
020ca4be24
|
[New Rule] Rapid7 Threat Command CVEs Correlation (#3718)
* new rule 'Rapid7 Threat Command CVEs Correlation'
* Update rules/threat_intel/threat_intel_rapid7_threat_command.toml
Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>
* updated threat index and tags
* changed 'indicator match' to 'threat match' for tags
* removed timeline
* updating integrations to match main
* re-adding rapid7 threat command integration manifest and schema
* reverting changes; removing timeline
* changed max signals to 10000
---------
Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>
|
2024-06-12 18:01:44 -04:00 |
|