mirror of
https://github.com/elastic/detection-rules
synced 2026-06-08 14:00:08 +00:00
Terrance DeJesus
5a545e69b1
* [New Rule] GitHub Actions Workflow Injection Blocked
Fixes #5431
* adjusts MITRE ATT&CK mappings
* adjusting file name
* updating GitHub integration schema; fixed MITRE mappings
* revert manifests / schemas to main
* added dynamic github fields to non-ecs file
* Update rules/integrations/github/initial_access_github_actions_workflow_injection_blocked.toml
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>
* Update rules/integrations/github/initial_access_github_actions_workflow_injection_blocked.toml
Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>
* Update rules/integrations/github/initial_access_github_actions_workflow_injection_blocked.toml
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>
* changed github actor ID reference
---------
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>
Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>
(cherry picked from commit f43bf99698)