 Ruben Groenewoud
|
9f70eb3feb
|
[Rule Tuning] Linux DR Tuning - 2 (#5481)
* [Rule Tuning] Linux DR Tuning - 2
* Update command_and_control_linux_proxychains_activity.toml
(cherry picked from commit 066096f766)
|
2026-01-06 16:02:33 +00:00 |
|
|
Ruben Groenewoud
|
1d9cb1e7c3
|
[Rule Tuning] Adds Crowdstrike Compatibility to Linux Process Rules (#5232)
* First batch
* Second batch
* Batch 2
(cherry picked from commit 37e18af7a5)
|
2025-11-10 15:05:16 +00:00 |
|
|
shashank-elastic
|
008dce0c6f
|
Add investigation guides for detection rules (#4886)
(cherry picked from commit 7175b3ab06)
|
2025-07-07 18:57:53 +00:00 |
|
|
Ruben Groenewoud
|
8fe54e1785
|
[New Rule] Linux Telegram API Request (#4677)
(cherry picked from commit 608e02e27e)
|
2025-05-06 16:27:45 +00:00 |
|