admin/elastic-detection-rules
1
0
Fork 0
mirror of https://github.com/elastic/detection-rules synced 2026-06-08 14:00:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,188 Commits 407 Branches 706 Tags
bded164d188bcbd8cf2b215c024a21639624bdde
Commit Graph

3 Commits

Author SHA1 Message Date
Ruben Groenewoud cdafa9268f [Rule Tunings] Misc. Web Server Rules (#5384) 
(cherry picked from commit e19ce18a40)
 2025-12-02 08:22:41 +00:00
shashank-elastic c802c6e816 Add Investigation Guides for Rules (#5357) 
(cherry picked from commit 5386345ca7)
 2025-11-24 19:39:55 +00:00
Ruben Groenewoud 6af136127f [New Rule] Web Server Potential Command Injection Request (#5341) 
* [New Rule] Web Server Potential Command Injection Request

* Update variable names to use consistent casing

* Add 'Domain: Network' tag to command injection rule

* Update persistence_web_server_potential_command_injection.toml

* adding missing tags

* Update rules/cross-platform/persistence_web_server_potential_command_injection.toml

Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>

* Update rules/cross-platform/persistence_web_server_potential_command_injection.toml

Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>

---------

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>
Co-authored-by: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com>

(cherry picked from commit 94ff4b0e3e)
 2025-11-24 18:42:59 +00:00