admin/elastic-detection-rules
1
0
Fork 0
mirror of https://github.com/elastic/detection-rules synced 2026-06-08 14:00:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,497 Commits 407 Branches 706 Tags
593eee81fa84e7d36ccfff17ee987917c0958b52
Commit Graph

2 Commits

Author SHA1 Message Date
shashank-elastic 9d0fc7a0da Add investigation guide for database dumping activity (#5871) 
(cherry picked from commit 07ccecb94b)
 2026-03-23 16:54:28 +00:00
Ruben Groenewoud c8c1ee0e65 [New/Tuning] New DB Dump Rule & Tuning wget/curl DRs (#5832) 
* [Rule Tuning] Tuning wget/curl DRs

* [New Rule] Potential Database Dumping Activity

* Update exfiltration_potential_curl_data_exfiltration.toml

* Expand URL patterns in curl data exfiltration rule

* Update rules/linux/exfiltration_potential_wget_data_exfiltration.toml

Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>

* Simplify process name conditions for database dumping

---------

Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>

(cherry picked from commit a4b614c681)
 2026-03-19 12:59:00 +00:00