Commits

Branch selector

 main

User selector

Aegrah

Datepicker

All time

Commit History

Commits on Oct 1, 2024

• [Tuning] Updated references (elastic#4114)

  Aegrah

  authored
  5b41bbd

  Copy full SHA for 5b41bbd

Commits on Sep 27, 2024

• [New Rules] CVE-2024-x.x.x.x.x (CUPS/Foomatic-RIP RCE) (elastic#4106)

  Show description for a3e89a7
  Aegrah

  authored
  a3e89a7

  Copy full SHA for a3e89a7

Commits on Sep 3, 2024

• [New Rule] Root Certificate Installation (elastic#4025)

  Show description for 9f964b6
  Aegrah

  authored
  9f964b6

  Copy full SHA for 9f964b6

Commits on Sep 1, 2024

• [New Rule] SELinux Configuration Creation or Modification (elastic#4024)

  Show description for b3a7589
  Aegrah

  authored
  b3a7589

  Copy full SHA for b3a7589

• [New Rule] Access Control List Modification via setfacl (elastic#4009)

  Show description for 162b4e7
  

  Aegrah

  and

  Mikaayenson

  authored
  162b4e7

  Copy full SHA for 162b4e7

• [New Rule] Attempt to Disable Auditd Service (elastic#4028)

  Show description for fb07033
  

  Aegrah

  and

  Mikaayenson

  authored
  fb07033

  Copy full SHA for fb07033

Commits on Aug 29, 2024

• [New Rule] Potential Defense Evasion via Doas (elastic#4027)

  Show description for 30cd1b6
  

  Aegrah

  and

  Samirbous

  authored
  30cd1b6

  Copy full SHA for 30cd1b6

• [New Rule] SSL Certificate Deletion (elastic#4026)

  Show description for 19b4a4d
  Aegrah

  authored
  19b4a4d

  Copy full SHA for 19b4a4d

Commits on Aug 22, 2024

• [New Rule] Openssl Client or Server Activity (elastic#3930)

  Show description for 162a48c
  

  3 peopleauthored
  162a48c

  Copy full SHA for 162a48c

Commits on Aug 10, 2024

• [New Rule] Dynamic Linker Creation or Modification (elastic#3969)

  Show description for c58ae92
  

  Aegrah

  and

  Mikaayenson

  authored
  c58ae92

  Copy full SHA for c58ae92

• [Rule Tuning] Attempt to Disable IPTables or Firewall (elastic#3972)

  Show description for 55e81c1
  

  Aegrah

  and

  Mikaayenson

  authored
  55e81c1

  Copy full SHA for 55e81c1

• [Rule Tuning] System Log File Deletion (elastic#3970)

  Aegrah

  authored
  b6ffb10

  Copy full SHA for b6ffb10

• [Rule Tuning] Potential Disabling of AppArmor (elastic#3971)

  Show description for 6e3e5f6
  

  Aegrah

  and

  Mikaayenson

  authored
  6e3e5f6

  Copy full SHA for 6e3e5f6

Commits on Aug 2, 2024

• [Tuning] Executable Bit Set for Potential Persistence Script (elastic#3929)

  Aegrah

  authored
  93d9286

  Copy full SHA for 93d9286

Commits on Aug 1, 2024

• [Rule Tuning] System Binary Moved or Copied (elastic#3933)

  Aegrah

  authored
  485312d

  Copy full SHA for 485312d

Commits on Jul 31, 2024

• [Rule Tuning] Removed Endgame from Incompatible Rules (elastic#3931)

  Show description for 134b842
  Aegrah

  authored
  134b842

  Copy full SHA for 134b842

Commits on Jul 19, 2024

• [Rule Tuning] Misc. DR Rule Tuning - Part 2 (elastic#3905)

  Show description for a71bbe0
  

  Aegrah

  and

  w0rk3r

  authored
  a71bbe0

  Copy full SHA for a71bbe0

• [Rule Tuning] Misc. DR Rule Tuning (elastic#3904)

  Show description for 76fdd54
  Aegrah

  authored
  76fdd54

  Copy full SHA for 76fdd54

Commits on Jul 17, 2024

• [New Rules] Git Hook execution/netcon (elastic#3896)

  Show description for 3935084
  

  3 peopleauthored
  3935084

  Copy full SHA for 3935084

• [New Rule] RPM Package Installed by Unusual Parent Process (elastic#3882)

  Show description for 83d6eeb
  Aegrah

  authored
  83d6eeb

  Copy full SHA for 83d6eeb

• [New Rule] Unsafe Docker Container Creation (elastic#3884)

  Show description for 8c5910b
  Aegrah

  authored
  8c5910b

  Copy full SHA for 8c5910b

• [Rule Tuning] Updated setup guide (elastic#3885)

  Show description for e5d08a2
  

  Aegrah

  and

  shashank-elastic

  authored
  e5d08a2

  Copy full SHA for e5d08a2

Commits on Jul 15, 2024

• [New Rules] Docker Entrypoint Netcon / Nsenter Escape (elastic#3883)

  Show description for 56e8e05
  Aegrah

  authored
  56e8e05

  Copy full SHA for 56e8e05

• [New Rules] DPKG Execution/Installation (elastic#3879)

  Show description for 82a0cc8
  Aegrah

  authored
  82a0cc8

  Copy full SHA for 82a0cc8

Commits on Jul 11, 2024

• [Tuning & Changes] Misc rule/hunt tuning (elastic#3875)

  Show description for 21485b1
  Aegrah

  authored
  21485b1

  Copy full SHA for 21485b1

Commits on Jul 8, 2024

• [New Hunt] Persistence through System V Init (elastic#3871)

  Show description for b230f83
  

  3 peopleauthored
  b230f83

  Copy full SHA for b230f83

Commits on Jul 5, 2024

• [New Rule] Linux Shadow File Modification (elastic#3737)

  Show description for 64f0e25
  

  Aegrah

  and

  Mikaayenson

  authored
  64f0e25

  Copy full SHA for 64f0e25

Commits on Jun 28, 2024

• [New Rules] Git Hook Execution/File Creation (elastic#3832)

  Show description for b311d49
  Aegrah

  authored
  b311d49

  Copy full SHA for b311d49

• [New Rule] DNF Package Manager Plugin File Creation (elastic#3822)

  Show description for f33c25b
  Aegrah

  authored
  f33c25b

  Copy full SHA for f33c25b

• [New Rules] rc.local Execution Rules (elastic#3813)

  Show description for edc501a
  

  Aegrah

  and

  terrancedejesus

  authored
  edc501a

  Copy full SHA for edc501a

Commits on Jun 27, 2024

• [New Rule & Tuning] Systemd Generator Created (elastic#3801)

  Aegrah

  authored
  cd4fe07

  Copy full SHA for cd4fe07

• [Rule Tuning] rc.local/rc.common File Creation (elastic#3805)

  Aegrah

  authored
  e941645

  Copy full SHA for e941645

• [Rule Tuning] System V Init Script Created (elastic#3811)

  Aegrah

  authored
  68bf4e4

  Copy full SHA for 68bf4e4

• [Rule Tuning] Executable Bit Set for Potential Persistence Script (elastic#3812)

  Show description for 460b314
  

  Aegrah

  and

  Mikaayenson

  authored
  460b314

  Copy full SHA for 460b314

• [New Rule] Privilege Escalation via SUID/SGID (elastic#3793)

  Show description for c3ba7b1
  Aegrah

  authored
  c3ba7b1

  Copy full SHA for c3ba7b1

Pagination

Previous

Next