elastic-detection-rules

mirror of https://github.com/elastic/detection-rules synced 2026-06-08 14:00:08 +00:00

Files

T

Terrance DeJesus 5ee4a4871c [New Rule] ConsentFix Detections (#5485 )

* adjusting/adding consentfix detections

* updating investigation guides to be standardized

* making investigation guides more contextual

* updating descriptions

* Update rules/integrations/azure/initial_access_entra_id_oauth_auth_code_grant_unusual_app_resource_user.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* reducing new terms window to 7d

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

(cherry picked from commit de42a5aabd)

2026-01-12 13:49:36 +00:00

aws

[Rule Tuning] AWS Service Quotas Multi-Region GetServiceQuota Requests (#5468 )

2025-12-19 21:50:34 +00:00

aws_bedrock

[Tuning] Add mv_expand for gen_ai.policy.action field (#5296 )

2025-11-11 02:11:34 +00:00

azure

[New Rule] ConsentFix Detections (#5485 )

2026-01-12 13:49:36 +00:00

azure_openai

[Rule Tuning] Updated ESQL Rules Based on Validation Results (#5151 )