elastic-detection-rules

mirror of https://github.com/elastic/detection-rules synced 2026-06-08 14:00:08 +00:00

Files

T

Terrance DeJesus 69dd04e45a [New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint (#6193 )

* [New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint

* Update rules/integrations/azure/persistence_entra_id_roadtools_default_device_registration.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* Update rules/integrations/entityanalytics_entra_id/persistence_entra_id_device_roadtools_default_os_build.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* Update rules/integrations/entityanalytics_entra_id/persistence_entra_id_device_roadtools_default_os_build.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* bumping patch version

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

(cherry picked from commit 9d73edd367)

2026-05-29 14:09:28 +00:00

aws

[New Rule] AWS S3 Credential File Retrieved from Bucket (#6197 )

2026-05-28 10:39:36 +00:00

aws_bedrock

[Tuning] Add mv_expand for gen_ai.policy.action field (#5296 )

2025-11-11 02:11:34 +00:00

azure

[New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint (#6193 )

2026-05-29 14:09:28 +00:00

azure_openai

[Rule Tuning] Updated ESQL Rules Based on Validation Results (#5151 )