shashank-elastic
18fcd83683
Back-porting Version Trimming ( #3704 )
...
(cherry picked from commit 63e91c2f12 )
2024-05-22 19:18:10 +00:00
Ruben Groenewoud
11168606d5
[Tuning] event.action and event.type change ( #3495 )
...
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com >
(cherry picked from commit 9f8638a004 )
2024-03-13 09:16:45 +00:00
Jonhnathan
9101dfc064
[Security Content] Small tweaks on the setup guides ( #3308 )
...
* [Security Content] Small tweaks on the setup guides
* Additional Fixes
* Avoid touching deprecated rules
(cherry picked from commit 458e67918a )
2024-03-11 12:15:22 +00:00
Ruben Groenewoud
78618a1191
[Rule Tuning] Linux DR Tuning - Part 2 ( #3321 )
...
* [Rule Tuning] Linux DR Tuning - Part 2
* [Rule Tuning] Linux DR Tuning - Part 2
* fix
* Update execution_shell_suspicious_parent_child_revshell_linux.toml
(cherry picked from commit 36226e5428 )
2024-01-08 09:12:44 +00:00
shashank-elastic
8fee26a296
Enhance Setup Guide information ( #3256 )
...
(cherry picked from commit d52546eee5 )
2023-11-03 13:42:18 +00:00
shashank-elastic
8e5464be56
Move Setup information into setup filed ( #3206 )
...
(cherry picked from commit 7254c582c5 )
2023-10-23 14:05:04 +00:00
shashank-elastic
7303d58415
Setup information for Linux Rules - Set5 ( #3188 )
...
(cherry picked from commit 2a48db0598 )
2023-10-17 13:47:29 +00:00
Ruben Groenewoud
a395f54054
[New Rules] sus program compilation activity ( #3043 )
2023-08-31 09:30:56 +02:00