Commit Graph

3 Commits

Author SHA1 Message Date
Justin Ibarra 3fc34b86f2 Update License to Elastic v2 (#944) 2021-03-03 22:12:11 -09:00
Justin Ibarra 645a0cd67b [Rule Tuning] Add timestamp_override to all query and non-sequence EQL rules (#945)
* [Rule Tuning] Add timestamp_override field to rules
* add tests for lookback and timestamp_override
* fix dates and add test to ensure updated > creation
2021-02-17 19:49:58 -09:00
Brent Murphy 70ca87138f [New Rule] Execution of COM object via Xwizard (#896)
* Create execution_com_object_xwizard.toml

* spacing and query update

* add logs-windows.*
2021-01-28 16:58:19 -05:00