Ruben Groenewoud
|
1d9cb1e7c3
|
[Rule Tuning] Adds Crowdstrike Compatibility to Linux Process Rules (#5232)
* First batch
* Second batch
* Batch 2
(cherry picked from commit 37e18af7a5)
|
2025-11-10 15:05:16 +00:00 |
|
shashank-elastic
|
008dce0c6f
|
Add investigation guides for detection rules (#4886)
(cherry picked from commit 7175b3ab06)
|
2025-07-07 18:57:53 +00:00 |
|
Ruben Groenewoud
|
65791ff7c8
|
[New Rule] Unusual Execution from Kernel Thread (kthreadd) Parent (#4683)
(cherry picked from commit c145e33f16)
|
2025-05-06 16:43:13 +00:00 |
|