-
Notifications
You must be signed in to change notification settings - Fork 685
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#6498 In elastic/detection-rules;
[FR] Built-in safeguard for race condition during DaC rule import
enhancementNew feature or requestNew feature or requestStatus: Open.#6488 In elastic/detection-rules;[FR] Support nested KQL queries in lib/kql parser
enhancementNew feature or requestNew feature or requestStatus: Open.#6486 In elastic/detection-rules;[Rule Tuning] File Transfer Utility Launched from Unusual Parent
Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing ruleStatus: Open.#6483 In elastic/detection-rules;[Rule Tuning] System Public IP Discovery via DNS Query
OS: Windowswindows related ruleswindows related rulesRule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing ruleStatus: Open.#6479 In elastic/detection-rules;[DaC] Export fails on KQL queries with unbound free-text term (no field specified)
pythonInternal python for the repositoryInternal python for the repositoryStatus: Open.#6419 In elastic/detection-rules;- Status: Open.#6370 In elastic/detection-rules;
- Status: Open.#6316 In elastic/detection-rules;
[DaC] export-rules Fails to Export KQL rules when spaces are not quoted
pythonInternal python for the repositoryInternal python for the repositoryStatus: Open.#6282 In elastic/detection-rules;[FR] Amend ESQL Rules with VIEWS (virtual index) instead of hardcoded index patterns
enhancementNew feature or requestNew feature or requestStatus: Open.#6219 In elastic/detection-rules;[DaC] export-rules fails on KQL rules with empty query (filters only)
pythonInternal python for the repositoryInternal python for the repositoryStatus: Open.#6167 In elastic/detection-rules;[New Rule] AWS security agent detection
Rule: NewProposal for new ruleProposal for new ruleStatus: Open.#6155 In elastic/detection-rules;