-
Notifications
You must be signed in to change notification settings - Fork 522
Pull requests: elastic/detection-rules
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore: Removing RTAs
backport: auto
community
maintenance
Internal changes
python
Internal python for the repository
RTA
work on RTA framework
schema
#4437
opened Feb 3, 2025 by
traut
Loading…
5 tasks
[Rule Tuning] Add exceptions for non-interactive signin failures for Entra M365 Bruteforce
backport: auto
community
Domain: Cloud
Integration: Azure
azure related rules
Rule: Tuning
tweaking or tuning an existing rule
#4405
opened Jan 22, 2025 by
jvalente-salemstate
Loading…
2 tasks done
Add Fortigate Fortinet index to multiple detection rules
backport: auto
community
RTA
work on RTA framework
#4275
opened Nov 27, 2024 by
SHolzhauer
Loading…
1 of 2 tasks
Revert "[Bug] Handle formatting empty list"
backport: auto
python
Internal python for the repository
#4087
opened Sep 17, 2024 by
brokensound77
Loading…
[New Rule] Active Directory Forced Authentication from Linux Host
backlog
backport: auto
Domain: Endpoint
OS: Windows
windows related rules
Rule: New
Proposal for new rule
[FR] Add white space checking for KQL parse
backlog
kql
related to the kql module
#3789
opened Jun 14, 2024 by
eric-forte-elastic
•
Draft
[New Rules] Azure OpenAI
backlog
backport: auto
esql
ES|QL
Integration: Azure Openai
Rule: New
Proposal for new rule
#3701
opened May 22, 2024 by
Mikaayenson
•
Draft
[FR] Updates to KQL Lib Parsing
bug
Something isn't working
kql
related to the kql module
#3605
opened Apr 18, 2024 by
eric-forte-elastic
•
Draft
WIP: [POC] Refactor: port unittest to pytest
backlog
backport: auto
bug
Something isn't working
detections-as-code
enhancement
New feature or request
python
Internal python for the repository
test-suite
unit and other testing components
#3361
opened Jan 3, 2024 by
Mikaayenson
•
Draft
[Rule Tuning] Update rules using NPC integration and non-ECS fields
backlog
backport: auto
blocked
Domain: Network
Rule: Tuning
tweaking or tuning an existing rule
#3194
opened Oct 16, 2023 by
brokensound77
Loading…
ProTip!
Find all pull requests that aren't related to any open issues with -linked:issue.