-
Elastic
- @Defsecsentinel
Popular repositories Loading
-
elastic-container
elastic-container PublicForked from peasead/elastic-container
Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine
Shell 1
-
detection-rules
detection-rules PublicForked from elastic/detection-rules
Rules for Elastic Security's detection engine
Python
-
adversary_emulation_library
adversary_emulation_library PublicForked from center-for-threat-informed-defense/adversary_emulation_library
An open library of adversary emulation plans designed to empower organizations to test their defenses based on real-world TTPs.
C
75 contributions in the last year
Day of Week | April Apr | May May | June Jun | July Jul | August Aug | September Sep | October Oct | November Nov | December Dec | January Jan | February Feb | March Mar | |||||||||||||||||||||||||||||||||||||||||
Sunday Sun | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Monday Mon | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Tuesday Tue | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Wednesday Wed | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Thursday Thu | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Friday Fri | |||||||||||||||||||||||||||||||||||||||||||||||||||||
Saturday Sat |
Contribution activity
March 2025
Created 6 commits in 1 repository
Created a pull request in elastic/detection-rules that received 30 comments
[Tuning] MacOS DR Tuning PR
Summary A long awaiting tuning PR for MacOS Detection Rules. These tunings have updated all KQL query based rules to EQL and ensured all of the rul…
Opened 3 other pull requests in 1 repository
elastic/detection-rules
3
open
-
[New] Unusual Network Connection to Suspicious Web Service
This contribution was made on Mar 26
-
[New] Unusual Network Connection to Suspicious Top Level Domain
This contribution was made on Mar 25
-
[Deprecate] LaunchDaemon Creation or Modification and Immediate Loading
This contribution was made on Mar 19
Reviewed 12 pull requests in 1 repository
elastic/detection-rules
12 pull requests
-
[Tuning] MacOS DR Tuning PR
This contribution was made on Mar 28
-
[Rule Tuning] Tuning Illicit Grant Consent Detections in Azure and M365
This contribution was made on Mar 27
-
[Rule Tuning] Tuning
Azure Conditional Access Policy Modified
This contribution was made on Mar 27 -
[Rule Tuning] Adjusting
Microsoft Entra ID Rare Authentication Requirement for Principal User
This contribution was made on Mar 27 -
[Rule Tuning] Tuning
Azure Service Principal Credentials Added
This contribution was made on Mar 27 -
Update Max signals value to supported limits
This contribution was made on Mar 27
-
[New] Unusual Network Connection to Suspicious Top Level Domain
This contribution was made on Mar 26
-
[New Rule] Adding Coverage for DynamoDB Exfiltration Behaviors
This contribution was made on Mar 20
-
[Tuning] Potential DLL Side-Loading via Trusted Microsoft Programs
This contribution was made on Mar 14
-
[FN Tuning] Shared Object Created or Changed by Previously Unknown Pr…
This contribution was made on Mar 14
-
[New/Tuning] Docker Socket Enumeration
This contribution was made on Mar 6
-
[New Rules] Potential Port/Subnet Scanning Activity from Compromised Host
This contribution was made on Mar 6