Search results

[Bug] Suspicious wmi library load

behaviorEndpoint behavior issuesEndpoint behavior issues

bugSomething isn't workingSomething isn't working

Status: Open.

#80 In elastic/protections-artifacts;

· mSALDANHAf opened on Aug 21, 2025

[Custom]: Remove useless newline in execution_initial_access_discovery_via_applet_executable

behaviorEndpoint behavior issuesEndpoint behavior issues

customFor issues that don't fit a prebuilt issue templateFor issues that don't fit a prebuilt issue template

Status: Open.

#69 In elastic/protections-artifacts;

· rubinatorz opened on May 1, 2025

[Custom] Detection rules inspiration

Status: Open.

#66 In elastic/protections-artifacts;

· rabbitstack opened on Apr 11, 2025

[Custom]: How import these rule to kibana?

behaviorEndpoint behavior issuesEndpoint behavior issues

customFor issues that don't fit a prebuilt issue templateFor issues that don't fit a prebuilt issue template

Status: Open.

#63 In elastic/protections-artifacts;

· K1ng97 opened on Mar 14, 2025

[Bug] Sensitive File Access - Cloud Credentials (only supports Windows)

Area: RAD

behaviorEndpoint behavior issuesEndpoint behavior issues

bugSomething isn't workingSomething isn't working

Status: Open.

#19 In elastic/protections-artifacts;

· tstromberg opened on Mar 20, 2024

Adding own rules to EPP

behaviorEndpoint behavior issuesEndpoint behavior issues

customFor issues that don't fit a prebuilt issue templateFor issues that don't fit a prebuilt issue template

Status: Open.

#5 In elastic/protections-artifacts;

· Liblor opened on Sep 21, 2022