Sign in Subscribe

Elastic Detection Rule Contribution

elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
15. AWS RDS Security Group Creation
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
14. AWS RDS Security Group Deletion
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
13. Attempts to Brute Force a Microsoft 365 User Account
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
12. AWS Route 53 Domain Transferred to Another Account
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
11. AWS Route 53 Domain Transfer Lock Disabled
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
10. AWS EC2 Full Network Packet Capture Detected
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
9. Azure Service Principal Credentials Added
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
8. Attempts to Brute Force an Okta User Account
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
7. AWS EC2 VM Export Failure
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
6. High Number of Okta User Password Reset or Unlock Attempts
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
5. Microsoft Exchange Server UM Writing Suspicious Files
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
4. AWS Config Service Tampering
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
3. Microsoft 365 New Inbox Rule Created
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
2. AWS IAM Deactivation of MFA Device
elastic/detection-rules
Rules for Elastic Security’s detection engine. Contribute to elastic/detection-rules development by creating an account on GitHub.
GitHubelastic
1. Microsoft Exchange Server UM Spawning Suspicious Processes