Commit Graph

3 Commits

Author SHA1 Message Date
Ruben Groenewoud 1d9cb1e7c3 [Rule Tuning] Adds Crowdstrike Compatibility to Linux Process Rules (#5232)
* First batch

* Second batch

* Batch 2

(cherry picked from commit 37e18af7a5)
2025-11-10 15:05:16 +00:00
shashank-elastic 008dce0c6f Add investigation guides for detection rules (#4886)
(cherry picked from commit 7175b3ab06)
2025-07-07 18:57:53 +00:00
Ruben Groenewoud 65791ff7c8 [New Rule] Unusual Execution from Kernel Thread (kthreadd) Parent (#4683)
(cherry picked from commit c145e33f16)
2025-05-06 16:43:13 +00:00