4 Commits

Author	SHA1	Message	Date
Terrance DeJesus	deab1c0161	[Rule Tuning] Change event.dataset to data_stream.dataset (#5943) ... * [Rule Tuning] Change event.dataset to data_stream.dataset * updating ESQL field names	2026-04-10 12:27:52 -04:00
Mika Ayenson, PhD	8993d1450b	[Rule Tuning] Add Supplemental Mitre Mappings (#5876) ... --------- Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com> Co-authored-by: Isai <59296946+imays11@users.noreply.github.com> Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co> Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com> Co-authored-by: eric-forte-elastic <eric.forte@elastic.co>	2026-04-01 09:12:42 -05:00
shashank-elastic	1ce072a4e5	Prep for Release 9.3 (#5548)	2026-01-12 21:07:07 +05:30
Ruben Groenewoud	34daf12d51	[New Rules] Several GitHub Related Rules (#5470) ... * [New Rules] Several GitHub Related Rules * Added additional references * Update defense_evasion_secret_scanning_disabled.toml * Update persistence_new_pat_created.toml * Added two more rules * ++ * Update rules/integrations/github/impact_github_repository_activity_from_unusual_ip.toml * Added github.repository_public to non_ecs * Update impact_github_repository_activity_from_unusual_ip.toml * Update rules/integrations/github/impact_high_number_of_failed_protected_branch_force_pushes_by_user.toml * ++ * Update rules/integrations/github/exfiltration_high_number_of_cloning_by_user.toml * Update rules/integrations/github/impact_high_number_of_closed_pull_requests_by_user.toml * Update rules/integrations/github/impact_high_number_of_protected_branch_force_pushes_by_user.toml * ++ --------- Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>	2026-01-08 17:19:12 +01:00