elastic-detection-rules

mirror of https://github.com/elastic/detection-rules synced 2026-06-08 14:00:08 +00:00

Files

T

Isai fa64fb72ba [Rule Tunings] AWS DynamoDB new terms Rules (#5074 )

* [Rule Tunings] AWS DynamoDB new terms Rules

### AWS DynamoDB Scan by Unusual User
- changed new terms field to use cloud.account.id and user.name combination to account for roles and users
- reduced execution window
- reduced history window
- small edits to description, IG and highlighted fields

### AWS DynamoDB Table Exported to S3
- removed inaccurate setup notes
- reduced history window
- small edits to description and highlighted fields

* Apply suggestions from code review

(cherry picked from commit 6f725b1ed0)

2025-09-11 21:01:56 +00:00

aws

[Rule Tunings] AWS DynamoDB new terms Rules (#5074 )

2025-09-11 21:01:56 +00:00

aws_bedrock

[Rule Tuning] ESQL Query Field Dynamic Field Standardization (#4912 )

2025-08-05 23:37:57 +00:00

azure

Fix updated_date for tunings as part of #5079 (#5081 )

2025-09-10 16:38:00 +00:00

azure_openai

[Rule Tuning] ESQL Query Field Dynamic Field Standardization (#4912 )