Workflow runs · elastic/protections-artifacts · GitHub

+

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows

12 workflow runs

12 workflow runs

[Bug] Suspicious wmi library load Duplicate Open Issue to Internal Repo #24: Issue #80 opened by mSALDANHAf

9s

9s

[Bug] Potential Proxy Execution via Systemd-run Duplicate Open Issue to Internal Repo #23: Issue #75 opened by richlv

12s

12s

[Rule Tuning] Windows_Generic_MalCert_efc31315 Duplicate Open Issue to Internal Repo #22: Issue #74 opened by ToniVolma

8s

8s

[Custom]: Remove useless newline in execution_initial_access_discovery_via_applet_executable Duplicate Open Issue to Internal Repo #21: Issue #69 opened by rubinatorz

13s

13s

[Custom] Detection rules inspiration Duplicate Open Issue to Internal Repo #20: Issue #66 opened by rabbitstack

11s

11s

[Custom]: How import these rule to kibana? Duplicate Open Issue to Internal Repo #19: Issue #63 opened by K1ng97

13s

13s

[Bug] Suspicious String Value Written to Registry Run Key Duplicate Open Issue to Internal Repo #18: Issue #60 opened by tyler-mcadam

10s

10s

[New Rule] Windows_Hacktool_Krueger Duplicate Open Issue to Internal Repo #17: Issue #58 opened by HullaBrian

10s

10s

[New Rule] Name of YARA rule Duplicate Open Issue to Internal Repo #16: Issue #53 opened by Pouriaks

15s

15s

How to investigate "Malicious Behavior Prevention Alert: Potential Evasion with Hardware Breakpoints" Duplicate Open Issue to Internal Repo #15: Issue #46 opened by FideliusFalcon

11s

11s

[Bug] Suspicious Windows Service DLL Creation Duplicate Open Issue to Internal Repo #14: Issue #44 opened by FideliusFalcon

11s

11s

[Bug] Suspicious Remote Process Suspend Activity Duplicate Open Issue to Internal Repo #13: Issue #42 opened by FideliusFalcon

11s

11s

点击这是indexloc提供的php浏览器服务，不要输入任何密码和下载