Tool

github.com/elastic/protections-artifacts/tree/main/behavior

https://github.com/elastic/protections-artifacts/tree/main/behavior
Published on
github.com
Open the original

5 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Behavior - Prevented - Elastic DefendLow
Behavior - Detected - Elastic DefendMedium
Newly Observed Elastic Defend Behavior AlertHigh
Multiple Rare Elastic Defend Behavior Rules by HostCritical
Multiple Elastic Defend Alerts from a Single Process TreeHigh

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice