3fc34b86f2
Update License to Elastic v2 ( #944 )
2021-03-03 22:12:11 -09:00
645a0cd67b
[Rule Tuning] Add timestamp_override to all query and non-sequence EQL rules ( #945 )
...
* [Rule Tuning] Add timestamp_override field to rules
* add tests for lookback and timestamp_override
* fix dates and add test to ensure updated > creation
2021-02-17 19:49:58 -09:00
4e6ff388fc
[Rule Tuning] Feedback from 7.12 Kibana PR ( #942 )
2021-02-11 13:32:58 -09:00
aa2dcd58e7
[New Rule] Persistence via DirectoryService Plugin Modification ( #858 )
...
* [New Rule] Persistence via DirectoryService Plugin Modification
* Update persistence_directory_services_plugins_modification.toml
* adjusted description
* Update rules/macos/persistence_directory_services_plugins_modification.toml
Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com >
* Update rules/macos/persistence_directory_services_plugins_modification.toml
Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com >
* Update rules/macos/persistence_directory_services_plugins_modification.toml
Co-authored-by: David French <56409778+threat-punter@users.noreply.github.com >
* relinted
Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com >
Co-authored-by: David French <56409778+threat-punter@users.noreply.github.com >
2021-02-09 10:59:35 +01:00
Justin Ibarra