All issues

Search results

[New Rule] Native Binary Creation Under node_modules

community

Status: Open.

#6609 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New Rule] Non-Browser Process Connecting to a DNS-over-HTTPS Resolver

community

Status: Open.

#6608 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[Rule Tuning] Node.js Pre or Post-Install Script Execution

community

Status: Open.

#6607 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[Rule Tuning] Initial Access via File Upload Followed by GET Request

community

Status: Open.

#6606 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[Rule Tuning] Elastic Defend Alert from Package Manager Install Ancestry

community

Status: Open.

#6605 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New hunt] Novel TLS Destination Domain from a Build Host

community

Status: Open.

#6604 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New Rule] Shai-Hulud Exfiltration Artifact File Creation

community

Status: Open.

#6602 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New Rule] Registry Credential File Read by Unusual Process

community

Status: Open.

#6601 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New Rule] Composer Install Script Execution

community

Status: Open.

#6600 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New hunt] Lockfile Modified by Unexpected Process

community

Status: Open.

#6599 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New hunt] Web Root File Write Burst by a Web Server Process

community

Status: Open.

#6598 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New hunt] Rare Child Process of a Web Server Process

community

Status: Open.

#6597 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026