Skip to content

Pull requests: elastic/detection-rules

Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Assignee
Filter by who’s assigned
Sort

Pull requests list

[Enhancement] Add flag to export rules via KQL search on name backport: auto community enhancement New feature or request python Internal python for the repository
#4594 opened Apr 3, 2025 by frederikb96 Loading…
5 tasks done
Feature exclude tactic name backport: auto community patch python Internal python for the repository
#4593 opened Apr 3, 2025 by frederikb96 Loading…
5 tasks done
[Rule Tuning] Add Host Metadata to ES|QL Aggregation Rules backport: auto bbr Building Block Rules Domain: Endpoint OS: Linux Rule: Tuning tweaking or tuning an existing rule
#4592 opened Apr 3, 2025 by w0rk3r Loading…
[FR] Add Kibana Action Connector Error to Exception List Workaround backport: auto enhancement New feature or request patch python Internal python for the repository
#4583 opened Mar 30, 2025 by eric-forte-elastic Loading…
5 tasks
[FR] Add Support for Local Dates Flag backport: auto community enhancement New feature or request patch python Internal python for the repository
#4582 opened Mar 29, 2025 by eric-forte-elastic Loading…
1 of 5 tasks
[enhancement] In esql validation, allow any order of metadata backport: auto community patch python Internal python for the repository
#4579 opened Mar 28, 2025 by frederikb96 Loading…
5 tasks done
[Rule Tuning] Tuning Azure Service Principal Credentials Added backport: auto Domain: Cloud Hunt: New Hunting Integration: Azure azure related rules patch Rule: Hunt bit noisy but useful for hunting Rule: Tuning tweaking or tuning an existing rule threat hunting Related to hunting/ library.
#4570 opened Mar 26, 2025 by terrancedejesus Loading…
5 tasks
[Tuning] MacOS DR Tuning PR backport: skip Domain: Endpoint OS: macOS Rule: Tuning tweaking or tuning an existing rule
#4546 opened Mar 19, 2025 by DefSecSentinel Loading…
Revert "[Bug] Handle formatting empty list" backport: auto python Internal python for the repository wontfix This will not be worked on
#4087 opened Sep 17, 2024 by brokensound77 Loading…
[FR] Updates to KQL Lib Parsing bug Something isn't working kql related to the kql module
#3605 opened Apr 18, 2024 by eric-forte-elastic Draft
WIP: [POC] Refactor: port unittest to pytest backlog backport: auto bug Something isn't working detections-as-code enhancement New feature or request python Internal python for the repository test-suite unit and other testing components
#3361 opened Jan 3, 2024 by Mikaayenson Draft
ProTip! Mix and match filters to narrow down what you’re looking for.