Add PR Guidelines Comment · Workflow runs · elastic/detection-rules · GitHub

Actions

All workflows
Workflows
- Unit Tests Unit Tests
- Add PR Guidelines Comment Add PR Guidelines Comment
- backport backport
- Branch Version Status Checks Branch Version Status Checks
- Check MITRE ATT&CK Version Updates Are Synced Check MITRE ATT&CK Version Updates Are Synced
- Code checks Code checks
- Community Community
- Copilot Copilot
- Copilot code review Copilot code review
- Copilot coding agent Copilot coding agent
Management
- Caches
- Deployments

Add PR Guidelines Comment

Actions

Loading...
Loading

add-guidelines.yml

2,500+ workflow runs

2,500+ workflow runs

[Rule Tuning] First Time Seen Remote Monitoring and Management Tool Add PR Guidelines Comment #8624: Pull request #6326 labeled by w0rk3r

32s

32s

[New Rule] Entra ID Potential Conditional Access MFA Bypass via First-Party Microsoft Graph Access Add PR Guidelines Comment #8623: Pull request #6325 labeled by botelastic Bot

14s

14s

[New Rule] Entra ID Potential Conditional Access MFA Bypass via First-Party Microsoft Graph Access Add PR Guidelines Comment #8622: Pull request #6325 labeled by terrancedejesus

11s

11s

[New Rule] Entra ID Potential Conditional Access MFA Bypass via First-Party Microsoft Graph Access Add PR Guidelines Comment #8621: Pull request #6325 labeled by terrancedejesus

12s

12s

[FR] Use >= semantic versioning for related integrations for stacks 9.5 and onwards Add PR Guidelines Comment #8620: Pull request #6323 labeled by eric-forte-elastic

10s

10s

[New Rule] Entra ID Potential Conditional Access MFA Bypass via First-Party Microsoft Graph Access Add PR Guidelines Comment #8619: Pull request #6325 labeled by terrancedejesus

15s

15s

[New Rule] Entra ID Potential Conditional Access MFA Bypass via First-Party Microsoft Graph Access Add PR Guidelines Comment #8618: Pull request #6325 opened by terrancedejesus

14s

14s

docs: Add missing docstring to get_data_file Add PR Guidelines Comment #8617: Pull request #6324 opened by Lang-Qiu

14s

14s

[FR] Use >= semantic versioning for related integrations for stacks 9.5 and onwards Add PR Guidelines Comment #8616: Pull request #6323 labeled by eric-forte-elastic

11s

11s

[FR] Use >= semantic versioning for related integrations for stacks 9.5 and onwards Add PR Guidelines Comment #8615: Pull request #6323 labeled by eric-forte-elastic

11s

11s

[FR] Use >= semantic versioning for related integrations for stacks 9.5 and onwards Add PR Guidelines Comment #8614: Pull request #6323 labeled by eric-forte-elastic

11s

11s

[FR] Use >= semantic versioning for related integrations for stacks 9.5 and onwards Add PR Guidelines Comment #8613: Pull request #6323 opened by eric-forte-elastic

16s

16s

[New Rule] Unusual Azure VM Extension Installed; Suspicious Child Process via Azure VM CustomScript Extension Add PR Guidelines Comment #8612: Pull request #6277 labeled by botelastic Bot

14s

14s

[New] MS Teams Rogue Help Desk Add PR Guidelines Comment #8611: Pull request #6322 labeled by botelastic Bot

11s

11s

[New] MS Teams Rogue Help Desk Add PR Guidelines Comment #8610: Pull request #6322 opened by Samirbous

14s

14s

[New] MS Teams Rogue Help Desk Add PR Guidelines Comment #8609: Pull request #6322 labeled by Samirbous

11s

11s

[New] MS Teams Rogue Help Desk Add PR Guidelines Comment #8608: Pull request #6322 labeled by Samirbous

14s

14s

[New] Add detection rule for AMSI bypass via RPC NdrClientCall hook (4104) Add PR Guidelines Comment #8607: Pull request #6321 labeled by django-88

10s

10s

[New] Add detection rule for AMSI bypass via RPC NdrClientCall hook (4104) Add PR Guidelines Comment #8606: Pull request #6321 labeled by botelastic Bot

14s

14s

[New] Add detection rule for AMSI bypass via RPC NdrClientCall hook (4104) Add PR Guidelines Comment #8605: Pull request #6321 labeled by botelastic Bot

15s

15s

[New] Add detection rule for AMSI bypass via RPC NdrClientCall hook (4104) Add PR Guidelines Comment #8604: Pull request #6321 opened by django-88

13s

13s

[New] Java Dropped and Executed With DNS Lookup Add PR Guidelines Comment #8603: Pull request #6320 labeled by botelastic Bot

9s

9s

[New] Java Dropped and Executed With DNS Lookup Add PR Guidelines Comment #8602: Pull request #6320 labeled by Samirbous

11s

11s

[New] Java Dropped and Executed With DNS Lookup Add PR Guidelines Comment #8601: Pull request #6320 labeled by Samirbous

13s

13s

[New] Java Dropped and Executed With DNS Lookup Add PR Guidelines Comment #8600: Pull request #6320 opened by Samirbous

13s

13s