Commits

Branch selector

 main

User selector

DefSecSentinel

Datepicker

All time

Commit History

Commits on May 11, 2024

• [Tuning] MacOS Comprehensive Detection Rule Tuning (elastic#3435)

  Show description for 1fb58e1
  

  6 peopleauthored
  1fb58e1

  Copy full SHA for 1fb58e1

Commits on Dec 8, 2023

• Create new_meta.md (elastic#3305)

  Show description for 10f00a3
  

  DefSecSentinel

  and

  Mikaayenson

  authored
  10f00a3

  Copy full SHA for 10f00a3

Commits on Oct 27, 2023

• [Tuning] Access to Stored Browser Credentials (elastic#3066)

  Show description for 6400bb3
  

  DefSecSentinel

  and

  Aegrah

  authored
  6400bb3

  Copy full SHA for 6400bb3

Commits on Jul 28, 2022

• [Rule Tuning] MacOS Installer Package Net Event (elastic#2193)

  Show description for 998afcf
  

  DefSecSentinel

  and

  imays11

  authored
  998afcf

  Copy full SHA for 998afcf

Commits on Jul 25, 2022

• [New Rule] File made Immutable by Chattr (elastic#2161)

  Show description for c222d45
  DefSecSentinel

  authored
  c222d45

  Copy full SHA for c222d45

• [New Rule] Chkconfig Service Add (elastic#2159)

  Show description for 146f59f
  DefSecSentinel

  authored
  146f59f

  Copy full SHA for 146f59f

• [New Rule] Suspcious Etc File Creation (elastic#2160)

  Show description for 1746897
  DefSecSentinel

  authored
  1746897

  Copy full SHA for 1746897

Commits on Jul 22, 2022

• [Rule Tuning] Remove File Quarantine Attribute (elastic#2129)

  DefSecSentinel

  authored
  d6527af

  Copy full SHA for d6527af

• [New Rule] Hidden so file (elastic#2131)

  Show description for 98d93bc
  

  DefSecSentinel

  and

  Samirbous

  authored
  98d93bc

  Copy full SHA for 98d93bc

Commits on Jul 13, 2022

• [New Rule] Dynamic Linker Copy (elastic#2099)

  Show description for 9995558
  DefSecSentinel

  authored
  9995558

  Copy full SHA for 9995558

• [New Rule] Tc BPF Filter (elastic#2091)

  Show description for 58ad082
  DefSecSentinel

  authored
  58ad082

  Copy full SHA for 58ad082

• [New Rule] Insmod kernel module load (elastic#2093)

  Show description for d7d0466
  DefSecSentinel

  authored
  d7d0466

  Copy full SHA for d7d0466

Commits on May 17, 2022

• [Rule Tuning] Update Rule Name: Suspicious Network Connection Attempt Sequence by Root (elastic#1983)

  Show description for d12f45c
  DefSecSentinel

  authored
  d12f45c

  Copy full SHA for d12f45c

Commits on Mar 29, 2022

• Linux Shell Evasion Rule Tuning (elastic#1878)

  Show description for bcec8a4
  

  DefSecSentinel

  and

  brokensound77

  authored
  bcec8a4

  Copy full SHA for bcec8a4

Commits on Feb 9, 2022

• Prep for creation of 8.2 branch (elastic#1762)

  DefSecSentinel

  authored
  e0dda91

  Copy full SHA for e0dda91

Commits on Jan 25, 2022

• MacOS FolderActionScripts Process List Update (elastic#1723)

  Show description for b564fa1
  

  DefSecSentinel

  and

  w0rk3r

  authored
  b564fa1

  Copy full SHA for b564fa1

• MacOS Launch Daemon Creation Rule - Query Fix (elastic#1722)

  Show description for cfd4d43
  DefSecSentinel

  authored
  cfd4d43

  Copy full SHA for cfd4d43