121431b40b
Refresh ATT&CK mappings to v9.0 ( #1401 )
...
* Refresh ATT&CK mappings to v9.0
* Update rules to reflect ATT&CK changes
(cherry picked from commit d31ea6253e
2021-08-04 22:17:11 +00:00
3fc34b86f2
Update License to Elastic v2 ( #944 )
2021-03-03 22:12:11 -09:00
645a0cd67b
[Rule Tuning] Add timestamp_override to all query and non-sequence EQL rules ( #945 )
...
* [Rule Tuning] Add timestamp_override field to rules
* add tests for lookback and timestamp_override
* fix dates and add test to ensure updated > creation
2021-02-17 19:49:58 -09:00
4e6ff388fc
[Rule Tuning] Feedback from 7.12 Kibana PR ( #942 )
2021-02-11 13:32:58 -09:00
0b568e5740
[New Rule] Suspicious JAR Child Process ( #887 )
...
* Create execution_suspicious_jar_child_process.toml
* pr review feedback and moved to cross platform
* spacing
* Add FP section
2021-02-08 09:48:48 -05:00
Justin Ibarra