Samirbous bf1e15bf65 [New] Kubernetes CoreDNS or Kube-DNS Configuration Modified (#6099) ...

Detects modifications to the CoreDNS or kube-dns ConfigMap in the kube-system namespace. These ConfigMaps control cluster DNS resolution for all pods. An attacker who modifies the CoreDNS Corefile can redirect internal service DNS names to attacker-controlled IP addresses, enabling man-in-the-middle attacks against the Kubernetes API server, database services, and other internal endpoints.

(cherry picked from commit 29b695c6d1)

2026-05-14 16:50:01 +00:00

..

etc

[New] Kubernetes CoreDNS or Kube-DNS Configuration Modified (#6099)

2026-05-14 16:50:01 +00:00

schemas

[Bug] Omit ES|QL engine columns from required_fields (#6027)

2026-05-01 22:40:00 +00:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

__main__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

action_connector.py

[Bug] Pyright Updated Linting (#6109)

2026-05-08 20:15:33 +00:00

action.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

atlas.py

[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules (#5352)

2025-12-05 18:31:02 +00:00

attack.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

beats.py

[FR] Refactor Schema Validation & Support Multi-Dataset Sequence Validation (#5059)

2025-09-10 13:11:04 -05:00

cli_utils.py

Renovate Updates (#5258)

2025-11-17 14:57:54 +00:00

config.py

[FR] [DaC] Add fine-grained bypass env var for ES|QL keep and metadata validation (#5869)

2026-03-24 18:39:59 +00:00

custom_rules.py

[doc fix] Adjust wording in the docs for Kibana import/export commands (#5600)

2026-02-04 10:21:05 +00:00

custom_schemas.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

devtools.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

docs.py

Fix percentages (#6002)

2026-05-01 23:16:22 +00:00

ecs.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

endgame.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

esql_errors.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

esql.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

eswrap.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

exception.py

[Bug] Pyright Updated Linting (#6109)

2026-05-08 20:15:33 +00:00

generic_loader.py

[Bug] [DAC] Add filtering to export-rules-from-repo (#5769)

2026-03-10 17:11:17 +00:00

ghwrap.py

[Bug] Small bugfix to address update navigator edge case (#5942)

2026-04-10 12:57:07 +00:00

index_mappings.py

ESQL validation support fix (#5970)

2026-04-22 20:54:57 +00:00

integrations.py

[Bug ]Fix Kibana version parsing for package version (#5962)

2026-04-22 15:28:19 +00:00

kbwrap.py

[FR] [DAC] Initial Yaml Support (#5821)

2026-04-10 15:32:10 +00:00

main.py

[FR] [DAC] Initial Yaml Support (#5821)

2026-04-10 15:32:10 +00:00

misc.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

mixins.py

[Bug] Add Required to the Annotation (#5159)

2025-09-29 18:30:50 -04:00

ml.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

navigator.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

packaging.py

[FR] Add enforcement for deprecated_reason (#5953)

2026-04-23 11:48:12 +00:00

remote_validation.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

rule_formatter.py

[DaC] [Bug] Rule Formatter Line Wrapping Breaks Query String Filters (#6046)

2026-05-05 17:22:52 +00:00

rule_loader.py

[Bug] Fix UTF-8 Encoding for Rule File Operations (#5684)

2026-02-05 13:24:36 +00:00

rule_validators.py

[Bug] Omit ES|QL engine columns from required_fields (#6027)

2026-05-01 22:40:00 +00:00

rule.py

[FR] [DaC] Add Basic Support for Response Actions (#6083)

2026-05-05 17:54:07 +00:00

utils.py

[Bug] Pyright Updated Linting (#6109)

2026-05-08 20:15:33 +00:00

version_lock.py

[FR] Includes deprecated rule stubs to the package for upstream testing (#5813)

2026-03-18 19:40:34 +00:00