Terrance DeJesus 69dd04e45a [New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint (#6193) ...

* [New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint

* Update rules/integrations/azure/persistence_entra_id_roadtools_default_device_registration.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* Update rules/integrations/entityanalytics_entra_id/persistence_entra_id_device_roadtools_default_os_build.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* Update rules/integrations/entityanalytics_entra_id/persistence_entra_id_device_roadtools_default_os_build.toml

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

* bumping patch version

---------

Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>

(cherry picked from commit 9d73edd367)

2026-05-29 14:09:28 +00:00

..

api_schemas

Prep for Release 9.4 (#5965)

2026-04-22 18:45:36 +00:00

beats_schemas

Monthly Manifest and Schema Updation (#6036)

2026-05-04 12:34:40 +00:00

ecs_schemas

Monthly Manifest and Schema Updation (#6036)

2026-05-04 12:34:40 +00:00

endgame_schemas

Updated ECS mappings from keyword to wildcard (#2518)

2023-02-07 09:43:19 -05:00

endpoint_schemas

[FR] Add Support for Multi-Fields and Validation in Rules (#2882)

2023-06-28 20:35:33 -04:00

__init__.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

_config.yaml

[FR] [DaC] Add fine-grained bypass env var for ES|QL keep and metadata validation (#5869)

2026-03-24 18:39:59 +00:00

ATLAS.yaml

[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules (#5352)

2025-12-05 18:31:02 +00:00

attack-crosswalk.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

attack-technique-redirects.json

Prep for Release 9.3 (#5548)

2026-01-12 15:40:35 +00:00

attack-v18.1.0.json.gz

December Schema Refresh (#5420)

2025-12-08 16:41:34 +00:00

commit-and-push.sh

Update commit-and-push.sh (#2640)

2023-03-09 17:31:19 -05:00

custom-consolidated-rules.ndjson

Test remote_cli update test indices

2026-01-27 14:41:21 +00:00

deprecated_rules.json

[FR] Add enforcement for deprecated_reason (#5953)

2026-04-23 11:48:12 +00:00

downloadable_updates.json

Lock versions for releases: 8.3,8.4,8.5,8.6,8.7,8.8,8.9,8.10,8.11,8.12 (#3431)

2024-02-06 14:48:33 -05:00

example_test_config.yaml

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

integration-manifests.json.gz

[New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint (#6193)

2026-05-29 14:09:28 +00:00

integration-schemas.json.gz

[New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint (#6193)

2026-05-29 14:09:28 +00:00

lock-multiple.sh

[FR] Reset deprecated lock to the latest state during lock (#5827)

2026-03-16 22:08:49 +00:00

non-ecs-schema.json

[New Rule] AWS S3 Credential File Retrieved from Bucket (#6197)

2026-05-28 10:39:36 +00:00

packages.yaml

Update Package Category (#5192)

2025-10-08 19:26:11 +05:30

rule_template_typosquatting_domain.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

security-logo-color-64px.svg

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

stack-schema-map.yaml

Monthly Manifest and Schema Updation (#6036)

2026-05-04 12:34:40 +00:00

test_cli.bash

fix: Skip invalid YAML files in Beats dist (#4865)

2025-07-02 13:39:35 +02:00

test_hunting_cli.bash

[Bug] Makefile test-remote-cli Defined Twice (#4751)

2025-06-13 11:45:54 -04:00

test_remote_cli.bash

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

test_toml.json

[Bug] Rule Toml Write Formatting Wrongly Formats \\\\x (#4978)

2025-08-18 17:03:51 -04:00

version.lock.json

Lock versions for releases: 8.19,9.2,9.3,9.4 (#6163)

2026-05-18 14:27:54 +00:00