Code

conflict resolution for upstream pull#5

Code

Merged

r0ot merged 8 commits intoinitial-elastic-rules-toml-pushVigilantSec/detection-rules:initial-elastic-rules-toml-pushfrom mainVigilantSec/detection-rules:mainCopy head branch name to clipboardFeb 5, 2025

+600-102

Commits

Commits on Feb 5, 2025

• [Rule Tuning] Port Scan Rules (elastic#4443)

  Aegrah

  authored
  32975e5

  Copy full SHA for 32975e5

• [New Hunt] General Kernel Manipulation (elastic#4403)

  Show description for 6fa8a86
  Aegrah

  authored
  6fa8a86

  Copy full SHA for 6fa8a86

• [New Hunt] Persistence via PolicyKit (elastic#4406)

  Show description for 1aea556
  Aegrah

  authored
  1aea556

  Copy full SHA for 1aea556

• [New Hunt] Persistence via Desktop Bus (D-Bus) (elastic#4407)

  Aegrah

  authored
  8024191

  Copy full SHA for 8024191

• [Rule Tuning] Remote Execution via File Shares (elastic#4448)

  w0rk3r

  authored
  3e0ba33

  Copy full SHA for 3e0ba33

• [Rule Tuning] Tighten Up Elastic Defend Indexes - MacOS (elastic#4447)

  w0rk3r

  authored
  ab89dfb

  Copy full SHA for ab89dfb

• tags (#4)

  Show description for f506521
  

  r0ot

  and

  peterydzynski

  authored
  f506521

  Copy full SHA for f506521

• Merge branch 'initial-elastic-rules-toml-push' into main

  r0ot

  authored
  fcc3c98

  Copy full SHA for fcc3c98