Skip to content

Actions: elastic/detection-rules

Branch Version Status Checks

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
4,563 workflow runs
4,563 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[New] Potential SAP NetWeaver Exploitation rules
Branch Version Status Checks #11111: Pull request #4666 synchronize by Samirbous
May 6, 2025 08:06 53s SAP-NV
[New] Microsoft Azure or Mail Sign-in from a Suspicious Source
Branch Version Status Checks #11110: Pull request #4673 synchronize by Samirbous
May 6, 2025 08:04 51s multi-dom
[New] Microsoft Azure or Mail Sign-in from a Suspicious Source
Branch Version Status Checks #11109: Pull request #4673 synchronize by Samirbous
May 6, 2025 08:04 56s multi-dom
[New] Microsoft Azure or Mail Sign-in from a Suspicious Source
Branch Version Status Checks #11108: Pull request #4673 synchronize by Samirbous
May 6, 2025 08:03 56s multi-dom
[New] Microsoft Azure or Mail Sign-in from a Suspicious Source
Branch Version Status Checks #11107: Pull request #4673 synchronize by Samirbous
May 6, 2025 08:03 55s multi-dom
[New] Microsoft Azure or Mail Sign-in from a Suspicious Source
Branch Version Status Checks #11106: Pull request #4673 synchronize by Samirbous
May 6, 2025 08:03 56s multi-dom
[New Rule] Suspicious Path Mounted
Branch Version Status Checks #11105: Pull request #4664 synchronize by shashank-elastic
May 6, 2025 07:58 11s suspicious-mount-created
[Tuning] Connection to Commonly Abused Web Services
Branch Version Status Checks #11104: Pull request #4686 synchronize by shashank-elastic
May 6, 2025 07:42 14s Samirbous-patch-1
[Tuning] Connection to Commonly Abused Web Services
Branch Version Status Checks #11103: Pull request #4686 synchronize by Samirbous
May 6, 2025 07:26 55s Samirbous-patch-1
[New] Rare Connection to WebDAV Target
Branch Version Status Checks #11102: Pull request #4667 synchronize by Samirbous
May 6, 2025 07:24 1m 1s webdav
May 6, 2025 07:24 1m 1s
[New] Concurrent Azure SignIns with Suspicious Properties
Branch Version Status Checks #11101: Pull request #4670 synchronize by shashank-elastic
May 6, 2025 07:24 16s auzre-esql
[Tuning] Connection to Commonly Abused Web Services
Branch Version Status Checks #11100: Pull request #4686 synchronize by Samirbous
May 6, 2025 07:22 51s Samirbous-patch-1
[New] Suspicious Microsoft 365 UserLoggedIn via OAuth Code
Branch Version Status Checks #11099: Pull request #4691 synchronize by shashank-elastic
May 6, 2025 07:12 1m 5s o365_oauth_phish
May 6, 2025 07:12 1m 5s
[New] Suspicious Microsoft 365 UserLoggedIn via OAuth Code
Branch Version Status Checks #11098: Pull request #4691 synchronize by shashank-elastic
May 6, 2025 07:11 51s o365_oauth_phish
[Tuning] Connection to Commonly Abused Web Services
Branch Version Status Checks #11097: Pull request #4686 synchronize by Samirbous
May 6, 2025 07:03 54s Samirbous-patch-1
[New] Suspicious Microsoft 365 UserLoggedIn via OAuth Code
Branch Version Status Checks #11092: Pull request #4691 synchronize by terrancedejesus
May 5, 2025 19:09 58s o365_oauth_phish
Refresh ecs, beats, integration manifests & schemas
Branch Version Status Checks #11089: Pull request #4699 synchronize by shashank-elastic
May 5, 2025 16:43 1m 1s schema_change_may
May 5, 2025 16:43 1m 1s
Refresh ecs, beats, integration manifests & schemas
Branch Version Status Checks #11088: Pull request #4699 synchronize by shashank-elastic
May 5, 2025 16:40 50s schema_change_may
Refresh ecs, beats, integration manifests & schemas
Branch Version Status Checks #11087: Pull request #4699 opened by shashank-elastic
May 5, 2025 14:52 56s schema_change_may