 Terrance DeJesus
|
71906a90cc
|
[Rule Tuning] Change event.dataset to data_stream.dataset (#5943)
* [Rule Tuning] Change event.dataset to data_stream.dataset
* updating ESQL field names
(cherry picked from commit deab1c0161)
|
2026-04-10 16:31:57 +00:00 |
|
|
Mika Ayenson, PhD
|
b322b7505c
|
[Rule Tuning] Add Supplemental Mitre Mappings (#5876)
---------
Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>
Co-authored-by: Isai <59296946+imays11@users.noreply.github.com>
Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>
Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
Co-authored-by: eric-forte-elastic <eric.forte@elastic.co>
(cherry picked from commit 8993d1450b)
|
2026-04-01 14:16:50 +00:00 |
|
|
Mika Ayenson
|
7c6c77932c
|
[FR] Add Remaining Guides (#4412)
|
2025-01-22 14:43:30 -06:00 |
|
|
Ruben Groenewoud
|
28c3d074b8
|
[New Rule] Process Started with Executable Stack (#4340)
* [New Rule] Process Started with Executable Stack
* [New Rule] Process Started with Executable Stack
* Update execution_executable_stack_execution.toml
* Update rules/linux/execution_executable_stack_execution.toml
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
---------
Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
|
2025-01-17 17:36:39 +01:00 |
|