3 Commits

Author	SHA1	Message	Date
Ruben Groenewoud	be3af09d9d	[Rule Tuning] Misc. Linux Community Tunings (#5160) ... * [Rule Tuning] Misc. Linux Community Tunings * ++ * Fix query syntax in execution_unusual_path_invocation rule * Refactor process.parent conditions for clarity	2025-10-06 12:05:59 +02:00
shashank-elastic	3966981dae	Add investigation guides (#4600)	2025-04-07 20:55:39 +05:30
Ruben Groenewoud	06002cd9ac	[New Rule] Kill Command Execution (#4485) ... * [New Rule] Kill Command Execution * Update defense_evasion_kill_command_executed.toml --------- Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>	2025-02-28 11:26:50 +01:00