4 Commits

Author	SHA1	Message	Date
Ruben Groenewoud	a973da1a6b	[Rule Tuning] Linux DR Tuning - 9 (#5508) ... * [Rule Tuning] Linux DR Tuning - 9 * Update rules/linux/persistence_apt_package_manager_file_creation.toml * Fix formatting in persistence_boot_file_copy.toml * Update persistence_chkconfig_service_add.toml * Change user.id values to string format in TOML * Fix condition for Java process working directory * Fix logical operator in OpenSSL passwd hash rule * Fix syntax for working_directory check * Fix condition for original file name check * Update persistence_web_server_unusual_command_execution.toml * Add cloud CLI tools to persistence rules --------- Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>	2026-01-07 16:18:38 +01:00
Ruben Groenewoud	d3745c21a7	[Rule Tuning] Python Startup Hook Rules (#5400)	2025-12-03 15:13:26 +01:00
shashank-elastic	3966981dae	Add investigation guides (#4600)	2025-04-07 20:55:39 +05:30
Ruben Groenewoud	b9e8115c2f	[New Rule] Python Site or User Customize File Creation (#4500) ... * [New Rule] Python Site or User Customize File Creation * Update persistence_site_and_user_customize_file_creation.toml * Update persistence_site_and_user_customize_file_creation.toml --------- Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>	2025-03-03 15:30:33 +01:00