elastic-detection-rules

mirror of https://github.com/elastic/detection-rules synced 2026-06-08 14:00:08 +00:00

Files

T

Samirbous f94fb113de [Tuning] M365 Exchange Inbox Forwarding Rule Created (#5647 )

* Update collection_exchange_new_inbox_rule.toml

* Update collection_exchange_new_inbox_rule.toml

* Update rules/integrations/o365/collection_exchange_new_inbox_rule.toml

Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

* Update rules/integrations/o365/collection_exchange_new_inbox_rule.toml

Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

* Update rules/integrations/o365/collection_exchange_new_inbox_rule.toml

Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

---------

Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

(cherry picked from commit fda9f00c2b)

2026-02-04 13:53:57 +00:00

aws

[Rule Tunings] AWS remove target.entity.id and actor.entity.id fields (#5603 )

2026-01-22 20:05:38 +00:00

aws_bedrock

[Tuning] Add mv_expand for gen_ai.policy.action field (#5296 )

2025-11-11 02:11:34 +00:00

azure

[Rule Tuning] Entra ID OAuth Phishing via First-Party Microsoft Application (#5610 )

2026-01-26 19:58:26 +00:00

azure_openai

[Rule Tuning] Updated ESQL Rules Based on Validation Results (#5151 )