Search results

[New Rule] Detecting <code>AZUREADSSOACC</code> Abuse

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open.

#4932 In elastic/detection-rules;

· terrancedejesus opened on Jul 24, 2025

[FR] Update schema validation to use <code>data_stream.dataset</code>

pythonInternal python for the repositoryInternal python for the repository

schema

Team: TRADE

Status: Open.

#4929 In elastic/detection-rules;

· terrancedejesus opened on Jul 23, 2025

[Rule Tuning] LSASS Memory Dump Handle Access

backlog

community

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open.

#4919 In elastic/detection-rules;

· AfonsoFerreira2223 opened on Jul 19, 2025

[Rule Tuning] Microsoft 365 Global Administrator Role Assigned

community

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open.

#4918 In elastic/detection-rules;

· taniumalloy opened on Jul 18, 2025

[Rule Tuning] ESQL Query Field Dynamic Field Standardization

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Status: Open.

Task

#4909 In elastic/detection-rules;

· terrancedejesus opened on Jul 15, 2025

[FR] [DAC] Add Arbitrary File location Support for Local Creation Date

community

enhancementNew feature or requestNew feature or request

Team: TRADE

Status: Open.

Enhancement

#4891 In elastic/detection-rules;

· eric-forte-elastic opened on Jul 9, 2025

[Rule Tuning] Potential Okta MFA Bombing via Push Notifications

community

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open.

#4890 In elastic/detection-rules;

· taniumalloy opened on Jul 9, 2025

[FR] Add End-to-End Rule Feature Test Coverage

enhancementNew feature or requestNew feature or request

Team: TRADE

Status: Open.

#4883 In elastic/detection-rules;

· shashank-elastic opened on Jul 7, 2025

[New Rule] Google Threat Intelligence IP Address IOC Correlation

community

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open.

#4882 In elastic/detection-rules;

· niraj-crest opened on Jul 7, 2025

[New Rule] Google Threat Intelligence File IOC Correlation

community

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open.

#4881 In elastic/detection-rules;

· niraj-crest opened on Jul 7, 2025

[New Rule] Google Threat Intelligence URL IOC Correlation

community

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open.

#4880 In elastic/detection-rules;

· niraj-crest opened on Jul 7, 2025

[New Rule] Google Threat Intelligence Domain IOC Correlation

community

Rule: NewProposal for new ruleProposal for new rule

Team: TRADE

Status: Open.

#4879 In elastic/detection-rules;

· niraj-crest opened on Jul 7, 2025