Samirbous ceed26ddbc [Tuning] Diverse Recently Created Rules (#6191) ...

* Update persistence_kubernetes_admission_webhook_created_or_modified.toml

* Update credential_access_kubernetes_and_cloud_credential_paths_via_process_args.toml

* Update credential_access_kubernetes_and_cloud_credential_paths_via_process_args.toml

* Update persistence_kubernetes_static_pod_manifest_path_process_execution.toml

* Update execution_aws_ssm_session_manager_child_process.toml

* Update execution_aws_ssm_session_manager_child_process.toml

* Update initial_access_assume_role_with_web_identity_kubernetes_sa_from_external_asn.toml

* Update execution_aws_ssm_session_manager_child_process.toml

(cherry picked from commit 3bc6247888)

2026-06-01 10:09:51 +00:00

..

aws

[Tuning] Diverse Recently Created Rules (#6191)

2026-06-01 10:09:51 +00:00

aws_bedrock

[Tuning] Add mv_expand for gen_ai.policy.action field (#5296)

2025-11-11 02:11:34 +00:00

azure

[New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint (#6193)

2026-05-29 14:09:28 +00:00

azure_openai

[Rule Tuning] Updated ESQL Rules Based on Validation Results (#5151)

2025-09-30 00:36:29 -04:00

beaconing

[Rule Tuning] Add Supplemental Mitre Mappings (#5876)

2026-04-01 14:15:58 +00:00

cyberarkpas

[Rule Tuning] Change event.dataset to data_stream.dataset (#5943)

2026-04-10 16:31:06 +00:00

ded

[Rule Tuning] Add Supplemental Mitre Mappings (#5876)

2026-04-01 14:15:58 +00:00

dga

[Rule Tuning] Add Supplemental Mitre Mappings (#5876)

2026-04-01 14:15:58 +00:00

endpoint

Prep 8.19/9.1 (#4869)

2025-07-07 11:27:48 -04:00

entityanalytics_entra_id

[New Rule] Entra ID / Entity Analytics ROADTools Default OS Build Fingerprint (#6193)

2026-05-29 14:09:28 +00:00

fim

[Rule Tuning] Change event.dataset to data_stream.dataset (#5943)

2026-04-10 16:31:06 +00:00

gcp

[Rule Tuning] Change event.dataset to data_stream.dataset (#5943)

2026-04-10 16:31:06 +00:00

github

Field not supported in integration (#6131)

2026-05-13 12:22:53 +00:00

google_workspace

[Rule Tunings] GWS Rule Tunings (small changes) (#6183)

2026-05-29 15:16:55 +00:00

kubernetes

[Tuning] Diverse Recently Created Rules (#6191)

2026-06-01 10:09:51 +00:00

lmd

[Rule Tuning] Add Supplemental Mitre Mappings (#5876)

2026-04-01 14:15:58 +00:00

microsoft_exchange_online_message_trace

[Rule Tuning] Change event.dataset to data_stream.dataset (#5943)

2026-04-10 16:31:06 +00:00

o365

[Rule Tuning] M365 Exchange Inbox Forwarding Rule Created (#6199)

2026-05-29 13:29:54 +00:00

okta

[Rule Tuning] Revert Event Dataset for Security Alert Index (#5994)

2026-04-28 17:19:37 +00:00

pad

[Rule Tuning] Add Supplemental Mitre Mappings (#5876)

2026-04-01 14:15:58 +00:00

problemchild

[Rule Tuning] Add Supplemental Mitre Mappings (#5876)

2026-04-01 14:15:58 +00:00