3 Commits

Author	SHA1	Message	Date
Ruben Groenewoud	52d33c12b8	[Rule Tuning] Linux DR Tuning - Part 2 (#4417)	2025-01-29 10:34:13 +01:00
Mika Ayenson	fe8c81d762	[FR] Generate investigation guides (#4358)	2025-01-22 11:17:38 -06:00
Ruben Groenewoud	3207ca37e4	[New Rule] Unusual Interactive Shell Launched from System User (#4238) ... * [New Rule] Unusual Interactive Shell Launched from System User * Update defense_evasion_interactive_shell_from_system_user.toml * Update defense_evasion_interactive_shell_from_system_user.toml * Update rules/linux/defense_evasion_interactive_shell_from_system_user.toml Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com> --------- Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>	2024-11-08 18:24:30 +01:00