Search results

[New Rule] Kubectl Network Configuration Modification

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4836

#4836 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New BBR] Kubectl Configuration Discovery

backport: auto

bbrBuilding Block RulesBuilding Block Rules

container

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4835

#4835 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New Rule] Kubectl Secret Access

container

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Draft (not ready).

elastic/detection-rulesnumber 4834

#4834 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New Rule] Potential Impersonation Attempt via Kubectl

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4833

#4833 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New Rule] Potential Kubectl Masquerading

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4832

#4832 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[Rule Tuning] Added Kubernetes Domain Tag

backport: auto

container

Domain: Endpoint

OS: Linux

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4831

#4831 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New BBR] Kubectl Workload and Cluster Discovery

backport: auto

bbrBuilding Block RulesBuilding Block Rules

container

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4830

#4830 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[New Rule] Kubernetes Unusual Decision by User Agent

backport: auto

Integration: KubernetesKubernetes IntegrationKubernetes Integration

OS: Linux

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4829

#4829 In elastic/detection-rules;

· Aegrah opened on Jun 19, 2025

[Rule Tuning] Sharpening Kubernetes Rules Indices

backport: auto

container

OS: Linux

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open (in progress).

elastic/detection-rulesnumber 4822

#4822 In elastic/detection-rules;

· Aegrah opened on Jun 18, 2025

[Meta] Evaluate Metadata for Linux Ruleset

Meta

OS: Linux

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open.

#4754 In elastic/detection-rules;

· Aegrah opened on May 30, 2025

[FR] Pre-Built Elastic Auditd Ruleset

enhancementNew feature or requestNew feature or request

OS: Linux

Security Content

Team: TRADE

Status: Open.

Enhancement

#4713 In elastic/detection-rules;

· Aegrah opened on May 9, 2025

[New] Potential SAP NetWeaver Exploitation rules

backport: auto

OS: Linux

OS: Windowswindows related ruleswindows related rules

Rule: NewProposal for new ruleProposal for new rule

Status: Open (in progress).

elastic/detection-rulesnumber 4666

#4666 In elastic/detection-rules;

· Samirbous opened on Apr 26, 2025