8 Commits

Author	SHA1	Message	Date
Ruben Groenewoud	a973da1a6b	[Rule Tuning] Linux DR Tuning - 9 (#5508) ... * [Rule Tuning] Linux DR Tuning - 9 * Update rules/linux/persistence_apt_package_manager_file_creation.toml * Fix formatting in persistence_boot_file_copy.toml * Update persistence_chkconfig_service_add.toml * Change user.id values to string format in TOML * Fix condition for Java process working directory * Fix logical operator in OpenSSL passwd hash rule * Fix syntax for working_directory check * Fix condition for original file name check * Update persistence_web_server_unusual_command_execution.toml * Add cloud CLI tools to persistence rules --------- Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>	2026-01-07 16:18:38 +01:00
Mika Ayenson	fe8c81d762	[FR] Generate investigation guides (#4358)	2025-01-22 11:17:38 -06:00
shashank-elastic	63e91c2f12	Back-porting Version Trimming (#3704)	2024-05-23 00:45:10 +05:30
Mika Ayenson	2c3dbfc039	Revert "Back-porting Version Trimming (#3681)" ... This reverts commit 71d2c59b5c.	2024-05-22 13:51:46 -05:00
shashank-elastic	71d2c59b5c	Back-porting Version Trimming (#3681)	2024-05-23 00:11:50 +05:30
Jonhnathan	458e67918a	[Security Content] Small tweaks on the setup guides (#3308) ... * [Security Content] Small tweaks on the setup guides * Additional Fixes * Avoid touching deprecated rules	2024-03-11 09:09:40 -03:00
Ruben Groenewoud	3484cac7eb	[Tuning] Event.dataset removal & Tag Addition (#3451) ... * [Tuning] Removed event.dataset and added tag * [Tuning] Removed event.dataset and added tag * fixed typo --------- Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>	2024-02-20 15:18:27 +01:00
Ruben Groenewoud	a9285445cf	[New Rule] Kernel Driver Load by non-root User (#3378) ... * [New Rule] Kernel Driver Load by non-root User * setup note change * removed unnecessary index	2024-01-17 09:34:25 +01:00