Skip to content

Actions: elastic/detection-rules

Branch Version Status Checks

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
5,270 workflow runs
5,270 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New Rule] Potential Hex Payload Execution
Branch Version Status Checks #9483: Pull request #4241 synchronize by Aegrah
November 8, 2024 18:07 55s hex-payload-execution
November 8, 2024 18:07 55s
[New Rule] Potential Hex Payload Execution
Branch Version Status Checks #9482: Pull request #4241 synchronize by Aegrah
November 8, 2024 18:07 59s hex-payload-execution
November 8, 2024 18:07 59s
[New Rule] Memory Swap Modification
Branch Version Status Checks #9481: Pull request #4239 synchronize by Aegrah
November 8, 2024 17:24 19s memory-swap-modification
November 8, 2024 17:24 19s
[New Rule] Web Server Spawned via Python
Branch Version Status Checks #9479: Pull request #4236 synchronize by Aegrah
November 8, 2024 17:07 13s python-webserver-started-detected
November 8, 2024 17:07 13s
[New Rule] Directory Creation in /bin directory
Branch Version Status Checks #9478: Pull request #4227 synchronize by Aegrah
November 8, 2024 16:58 53s binary-directory-creation
November 8, 2024 16:58 53s
[New Rule] Hidden Directory Creation via Unusual Parent
Branch Version Status Checks #9477: Pull request #4226 synchronize by Aegrah
November 8, 2024 16:42 17s hidden-directory-creation
November 8, 2024 16:42 17s
[New Rule] Security File Access via Common Utilities
Branch Version Status Checks #9476: Pull request #4243 synchronize by Aegrah
November 8, 2024 16:33 1m 2s discovery_password_file
November 8, 2024 16:33 1m 2s
[New Rule] Web Server Spawned via Python
Branch Version Status Checks #9475: Pull request #4236 synchronize by Aegrah
November 8, 2024 16:30 3m 8s python-webserver-started-detected
November 8, 2024 16:30 3m 8s
[New Rule] Web Server Spawned via Python
Branch Version Status Checks #9474: Pull request #4236 synchronize by Aegrah
November 8, 2024 16:29 3m 35s python-webserver-started-detected
November 8, 2024 16:29 3m 35s
[New Rule] Unusual Interactive Shell Launched from System User
Branch Version Status Checks #9473: Pull request #4238 synchronize by Aegrah
November 8, 2024 16:29 3m 59s unusual_system_user_interactive_shell
November 8, 2024 16:29 3m 59s
[New Rule] Potential Hex Payload Execution
Branch Version Status Checks #9471: Pull request #4241 synchronize by shashank-elastic
November 8, 2024 16:25 7m 49s hex-payload-execution
November 8, 2024 16:25 7m 49s
[New Rule] Web Server Spawned via Python
Branch Version Status Checks #9470: Pull request #4236 synchronize by shashank-elastic
November 8, 2024 16:25 7m 57s python-webserver-started-detected
November 8, 2024 16:25 7m 57s
[New Rule] Potential Data Splitting Detected
Branch Version Status Checks #9469: Pull request #4235 synchronize by Aegrah
November 8, 2024 16:14 7m 9s data-splitting-activity
November 8, 2024 16:14 7m 9s
[New Rule] Hidden Directory Creation via Unusual Parent
Branch Version Status Checks #9468: Pull request #4226 synchronize by Aegrah
November 8, 2024 16:10 1m 4s hidden-directory-creation
November 8, 2024 16:10 1m 4s
[New Rule] Directory Creation in /bin directory
Branch Version Status Checks #9467: Pull request #4227 synchronize by Aegrah
November 8, 2024 16:10 1m 4s binary-directory-creation
November 8, 2024 16:10 1m 4s
[New Rule] Web Server Spawned via Python
Branch Version Status Checks #9466: Pull request #4236 synchronize by Aegrah
November 8, 2024 16:09 1m 0s python-webserver-started-detected
November 8, 2024 16:09 1m 0s
[New Rule] Unusual Interactive Shell Launched from System User
Branch Version Status Checks #9465: Pull request #4238 synchronize by Aegrah
November 8, 2024 16:07 1m 4s unusual_system_user_interactive_shell
November 8, 2024 16:07 1m 4s
[New Rule] Memory Swap Modification
Branch Version Status Checks #9464: Pull request #4239 synchronize by Aegrah
November 8, 2024 16:06 55s memory-swap-modification
November 8, 2024 16:06 55s
[New Rule] Private Key Searching Activity
Branch Version Status Checks #9463: Pull request #4242 synchronize by Aegrah
November 8, 2024 16:06 57s discovery_search_private_key_or_password
November 8, 2024 16:06 57s
Account for CCS '::' index pattern
Branch Version Status Checks #9462: Pull request #4258 synchronize by shashank-elastic
November 8, 2024 15:52 1m 0s issue-4158
November 8, 2024 15:52 1m 0s
[New Rule] IPv4/IPv6 Forwarding Activity
Branch Version Status Checks #9461: Pull request #4240 synchronize by Aegrah
November 8, 2024 15:51 55s ipv4_6_forwarding_activity
November 8, 2024 15:51 55s
[New Rule] Security File Access via Common Utilities
Branch Version Status Checks #9460: Pull request #4243 synchronize by Aegrah
November 8, 2024 15:40 58s discovery_password_file
November 8, 2024 15:40 58s