All issues

Search results

[New Rule] sqlite3 Query Against a Browser Credential Database

community

Status: Open.

#6618 In elastic/detection-rules;

· clivoa opened on Aug 7, 2026

[New Rule] Unusual Child Process of Homebrew's Bundled Ruby Interpreter

community

Status: Open.

#6617 In elastic/detection-rules;

· clivoa opened on Aug 7, 2026

[New Rule] Untrusted Process Access to Cryptocurrency Wallet Data

community

Status: Open.

#6616 In elastic/detection-rules;

· clivoa opened on Aug 7, 2026

[Rule Tuning] Rare Connection to WebDAV Target

community

Rule: Tuningtweaking or tuning an existing ruletweaking or tuning an existing rule

Team: TRADE

Status: Open.

#6615 In elastic/detection-rules;

· beninsh opened on Aug 7, 2026

[New Rule] Native Binary Creation Under node_modules

community

Status: Open.

#6609 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New Rule] Non-Browser Process Connecting to a DNS-over-HTTPS Resolver

community

Status: Open.

#6608 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[Rule Tuning] Node.js Pre or Post-Install Script Execution

community

Status: Open.

#6607 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[Rule Tuning] Initial Access via File Upload Followed by GET Request

community

Status: Open.

#6606 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[Rule Tuning] Elastic Defend Alert from Package Manager Install Ancestry

community

Status: Open.

#6605 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New hunt] Novel TLS Destination Domain from a Build Host

community

Status: Open.

#6604 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New Rule] Shai-Hulud Exfiltration Artifact File Creation

community

Status: Open.

#6602 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026

[New Rule] Registry Credential File Read by Unusual Process

community

Status: Open.

#6601 In elastic/detection-rules;

· clivoa opened on Aug 5, 2026