elastic/security-docs issues and pull requests

#5772 - Reorganize serverless requirements pages to match ESS

Pull Request - State: closed - Opened by joepeeples 2 months ago - 5 comments
Labels: Team: Docs, Docset: Serverless, Docset: ESS, ci:doc-build, v8.16.0

#5771 - Endpoint data volume reduction mechanisms

Issue - State: open - Opened by ferullo 2 months ago - 10 comments
Labels: documentation, Team: Endpoint, Team: EDR Workflows, Feature: Elastic Defend, Effort: Large, Docset: Serverless, Docset: ESS, v8.15.0, v8.16.0

#5763 - Add Defend feature privileges page [serverless custom roles]

Pull Request - State: closed - Opened by joepeeples 3 months ago - 3 comments
Labels: backport-skip, Docset: Serverless, Docset: ESS, ci:doc-build

#5758 - Editing rules independently of source data

Issue - State: open - Opened by e40pud 3 months ago - 1 comment
Labels: enhancement, Team: Detections/Response, Docset: Serverless, Docset: ESS, v8.16.0

#5735 - SentinelOne bidirectional `processes`, `kill-process`, and detection rule updates [ESS]

Pull Request - State: closed - Opened by joepeeples 3 months ago - 1 comment
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, Docset: ESS, v8.16.0

#5732 - [Request] Added IS operator under Windows Signature in Blocklist view

Issue - State: closed - Opened by szwarckonrad 3 months ago
Labels: enhancement, Team: EDR Workflows, Feature: Elastic Defend, Docset: Serverless, Docset: ESS, v8.16.0

#5703 - [DE Team][8.16] Case system action being added for rules

Pull Request - State: closed - Opened by nastasha-solomon 3 months ago - 2 comments
Labels: Feature: Rules, Feature: Connectors, Team: Detection Engine, Docset: ESS, ci:doc-build, v8.16.0

#5662 - [Docs IA][ESS] Rework the Elastic Endpoint section

Issue - State: open - Opened by benironside 3 months ago
Labels: Effort: Large, Docset: ESS

#5659 - SentinelOne bidirectional `processes`, `kill-process`, and detection rule updates [serverless]

Pull Request - State: closed - Opened by joepeeples 3 months ago - 5 comments
Labels: Team: EDR Workflows, backport-skip, Feature: Response actions, Docset: Serverless, ci:doc-build

#5638 - [Request] Document the availability of `processes` response actions for SentinelOne hosts

Issue - State: closed - Opened by paul-tavares 3 months ago
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, v8.16.0

#5637 - [Request] Update SentinelOne bi-directional response actions instructions with new requirements for setting up the SIEM rule

Issue - State: closed - Opened by paul-tavares 4 months ago
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, v8.16.0

#5631 - [8.16] Manual rule run docs

Pull Request - State: open - Opened by nastasha-solomon 4 months ago - 1 comment
Labels: Feature: Rules, Team: Detection Engine, Priority: Medium, Effort: Medium, Docset: ESS, v8.16.0

#5621 - Revert "Scan response action [ESS]"

Pull Request - State: closed - Opened by joepeeples 4 months ago - 2 comments
Labels: Team: EDR Workflows, Feature: Elastic Defend, Feature: Response actions, Docset: ESS, v8.15.0

#5607 - [Request] 3P Integrations data in native Posture workflows

Issue - State: open - Opened by smriti0321 4 months ago
Labels: documentation, v8.16.0

#5606 - [Request] Agentless deployment option for CSPM to be documented with Beta tag

Issue - State: open - Opened by smriti0321 4 months ago - 1 comment
Labels: documentation, v8.16.0

#5590 - [Request] Document the `kill-process` response action available for SentinelOne

Issue - State: closed - Opened by paul-tavares 4 months ago
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, Docset: Serverless, Docset: ESS, v8.16.0

#5589 - [Serverless] Manual rule run docs

Pull Request - State: open - Opened by nastasha-solomon 4 months ago - 6 comments
Labels: backport-skip, Feature: Rules, Team: Detection Engine, Priority: High, Effort: Large, Docset: Serverless, ci:doc-build

#5501 - Update .backportrc.json: remove 7.x preset

Pull Request - State: closed - Opened by joepeeples 4 months ago - 2 comments
Labels: Team: Docs, backport-skip

#5500 - Update backport tool & Mergify configs for new 8.15 branch

Pull Request - State: closed - Opened by joepeeples 4 months ago - 1 comment
Labels: Team: Docs, backport-skip

#5492 - [Request] Permissions for alert suppression in machine learning rules

Issue - State: open - Opened by joepeeples 4 months ago - 2 comments
Labels: Feature: Alerts, Feature: Rules, Feature: Machine Learning, Team: Detection Engine, Effort: Medium, Docset: Serverless, Docset: ESS, v8.15.0

#5483 - [Request] Document filtering out cold/frozen data tiers during rule execution

Issue - State: closed - Opened by vitaliidm 5 months ago - 2 comments
Labels: Team: Security Solution, Feature: Rules, Team: Detection Engine, Docset: ESS, v8.16.0

#5457 - [DE Team][8.16 & Serverless] Case system action being added for rules

Issue - State: closed - Opened by dhurley14 5 months ago - 2 comments
Labels: documentation, Feature: Rules, Feature: Connectors, Team: Detection Engine, new-feature

#5441 - [Request][Serverless][8.16] New notes experience

Issue - State: open - Opened by nastasha-solomon 5 months ago - 1 comment
Labels: Team: Threat Hunting, Feature: Timeline, Priority: High, Effort: Large, v8.16.0

#5374 - Endpoint troubleshooting docs - windows performance[Request]

Issue - State: open - Opened by caitlinbetz 5 months ago - 2 comments
Labels: Team: Endpoint, troubleshooting, Feature: Elastic Defend, Effort: Large, Docset: Serverless, Docset: ESS

#5337 - [Request] 8.16 Security Assistant Custom Knowledge Bases

Issue - State: open - Opened by spong 5 months ago - 1 comment
Labels: Team: GenAI, Effort: X-Large

#5301 - [Enhancement]: Describe role privilege requirements needed for setup of detections in serverless

Issue - State: closed - Opened by dhurley14 5 months ago - 5 comments
Labels: enhancement, Team: Detections/Response

#5275 - [Detection Rules] Adding Documents for v8.13.8 Pre-Built Detection Rules

Pull Request - State: closed - Opened by protectionsmachine 6 months ago - 1 comment
Labels: Feature: Prebuilt rules, v8.13.0

#5264 - [Request] Documentation for Manual Run of Security rules

Issue - State: open - Opened by nkhristinin 6 months ago - 7 comments
Labels: Feature: Rules, Team: Detection Engine, Priority: High, Effort: Large, Docset: Serverless, Docset: ESS, v8.16.0

#5257 - DO NOT MERGE — Test CI build of AsciiDoc docs

Pull Request - State: closed - Opened by joepeeples 6 months ago - 3 comments
Labels: backport-skip

#5256 - DO NOT MERGE - Test serverless source file move

Pull Request - State: closed - Opened by joepeeples 6 months ago - 3 comments
Labels: backport-skip

#5066 - New nav in ESS

Issue - State: open - Opened by nastasha-solomon 7 months ago - 3 comments
Labels: Team: Threat Hunting, Priority: High, Effort: Large, Docset: ESS, v8.16.0

#4914 - [WIP] Add serverless source files to `security-docs` repo

Pull Request - State: closed - Opened by joepeeples 8 months ago - 4 comments
Labels: backport-skip, Docset: Serverless

#4411 - DO NOT MERGE - Another test, old preview action removed

Pull Request - State: closed - Opened by joepeeples 11 months ago - 2 comments
Labels: backport-skip

#4395 - DO NOT MERGE - Test new preview GitHub action

Pull Request - State: closed - Opened by joepeeples 11 months ago - 4 comments
Labels: backport-skip

#4355 - [Meta] Versioning for Elastic Agent, Endpoint, Beats [Serverless]

Issue - State: closed - Opened by joepeeples 12 months ago - 1 comment
Labels: meta, Priority: Medium, Effort: X-Large, Docset: Serverless

#4351 - [Meta] Cross-cluster search in serverless?

Issue - State: closed - Opened by joepeeples 12 months ago - 1 comment
Labels: enhancement, meta, Priority: Medium, Docset: Serverless, Effort: Meta

#4350 - Ingest page - validate ingest methods (Beats, etc.) [Serverless]

Issue - State: closed - Opened by joepeeples 12 months ago - 1 comment
Labels: Priority: Medium, Effort: Medium, Docset: Serverless

#4141 - [BUG] Wrong reference in CSPM for AWS docs

Pull Request - State: closed - Opened by joepeeples about 1 year ago - 2 comments
Labels: bug, Feature: CSPM, v8.10.0, v8.11.0, Docset: ESS

#4102 - Reconstruct requirements pages for Serverless [Serverless]

Issue - State: closed - Opened by joepeeples about 1 year ago - 1 comment
Labels: revision, Priority: Medium, Effort: Large, Docset: Serverless

#4021 - [Detection Engine][Exceptions] - Update docs for single and shared exceptions

Pull Request - State: open - Opened by nastasha-solomon about 1 year ago - 2 comments
Labels: API, Feature: Exceptions, v8.7.0, v8.8.0, v8.9.0, Team: Detection Engine, Priority: Medium, v8.10.0, Effort: Medium, v8.11.0, v8.12.0, v8.13.0, v8.14.0, v8.15.0, v8.16.0

#4004 - Fix title of artifact control page

Pull Request - State: closed - Opened by joepeeples about 1 year ago - 1 comment
Labels: bug, Team: EDR Workflows, Feature: Elastic Defend, v8.11.0

#3890 - Meta: Elastic Endpoint and Elastic Agent doc revamp

Issue - State: open - Opened by jmikell821 about 1 year ago
Labels: Team: Endpoint, Team: EDR Workflows, revision, Priority: High, Effort: Meta

#3182 - Missing documentation for a few Endpoint exported fields

Issue - State: open - Opened by jeanfabrice over 1 year ago
Labels: Team: Endpoint, Feature: Elastic Defend, v8.8.0, Feature: Integrations, Priority: Medium, Effort: Large

#2830 - Document how to troubleshoot/disable Endpoint's self healing feature on Windows

Issue - State: open - Opened by ferullo almost 2 years ago - 4 comments
Labels: Team: Endpoint, troubleshooting, v8.7.0, Priority: Medium, Effort: Medium

#2737 - [DOCS] placeholders to rule action fields - improve documentation to specify which fields are arrays

Pull Request - State: closed - Opened by joepeeples almost 2 years ago - 4 comments
Labels: Team: Docs, Team: Detections/Response, edit, Feature: Rules, v8.4.0, v8.5.0, v8.6.0, v8.7.0, v8.8.0, v8.9.0, Effort: Medium

#102 - [Docs]Fixes API TOC 7.x

Pull Request - State: closed - Opened by benskelker over 4 years ago

#101 - [7.9] makes admin overview a first-level section (#99)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#100 - [7.x] makes admin overview a first-level section (#99)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#99 - [Docs]Makes admin overview a first-level section

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#98 - [Docs]7.9 backport admin page overview

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#97 - [Docs]Backport admin page overview 7.x

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#96 - [DOCS]: Admin Page Overview

Pull Request - State: closed - Opened by jmikell821 over 4 years ago

#95 - [7.9] [Docs]Timeline and Template UI updates (#84)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#94 - [7.x] [Docs]Timeline and Template UI updates (#84)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#93 - [7.9] [Docs]Detections and Alerts UI (#73)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#92 - [7.x] [Docs]Detections and Alerts UI (#73)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#91 - [7.9] Merge pull request #76 from elastic/toc-directory-structure

Pull Request - State: closed - Opened by narcher7 over 4 years ago
Labels: backport

#90 - [7.x] Merge pull request #76 from elastic/toc-directory-structure

Pull Request - State: closed - Opened by narcher7 over 4 years ago
Labels: backport

#89 - [7.9] Merge pull request #81 from elastic/hosts-overview (#81)

Pull Request - State: closed - Opened by jmikell821 over 4 years ago
Labels: backport

#88 - [7.x] Merge pull request #81 from elastic/hosts-overview (#81)

Pull Request - State: closed - Opened by jmikell821 over 4 years ago
Labels: backport

#87 - [7.9] [Docs]Update prebuilt rule descriptions (#66)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#86 - [7.x] [Docs]Update prebuilt rule descriptions (#66)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#85 - [DOCS] Intro to Elastic Security

Pull Request - State: closed - Opened by jmikell821 over 4 years ago - 5 comments

#84 - [Docs]Timeline and Template UI updates

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#83 - [7.9] [Docs][Cases]7.9 Cases updates (#64)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#82 - [7.x] [Docs][Cases]7.9 Cases updates (#64)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#81 - [DOCS]: Hosts Overview

Pull Request - State: closed - Opened by jmikell821 over 4 years ago

#80 - [DOCS] Host Page Overview

Issue - State: closed - Opened by jmikell821 over 4 years ago
Labels: Team: Docs, v7.9.0

#79 - [7.9] Editing the Endpoint Security Integration

Issue - State: closed - Opened by caitlinbetz over 4 years ago
Labels: Team: Docs, v7.9.0

#78 - [DOCS] Tooltips needed for the timeline action dropdown and next to “add value list” button

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 2 comments
Labels: Team: Docs, v7.9.0

#77 - [DOCS] Wording needed to clarify Exceptions are linked to a Rule

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#76 - [Docs]Create initial directory structure based on TOC.

Pull Request - State: closed - Opened by narcher7 over 4 years ago

#75 - [7.9] [Docs]Updates detections API (#70)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#74 - [7.x] [Docs]Updates detections API (#70)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#73 - [Docs]Detections and Alerts UI

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#71 - [Docs]Detections API updates

Issue - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#70 - [Docs]Updates detections API

Pull Request - State: closed - Opened by benskelker over 4 years ago - 1 comment
Labels: v7.9.0

#69 - [Docs]Add a what's new/breaking changes sections

Issue - State: closed - Opened by benskelker over 4 years ago - 1 comment
Labels: v7.9.0

#68 - [DOCS]: Document exceptions guideline for prebuilt rules

Issue - State: closed - Opened by jmikell821 over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#67 - Update prebuilt job descriptions for 7.9

Issue - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#66 - [Docs]Update prebuilt rule descriptions

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#65 - 7.9 Cases updates

Issue - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#64 - [Docs][Cases]7.9 Cases updates

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#63 - [7.9] Endpoint Package/Integration documentation

Issue - State: closed - Opened by caitlinbetz over 4 years ago
Labels: Team: Docs, v7.9.0

#62 - [7.9] Endpoint ECS mapping

Issue - State: closed - Opened by caitlinbetz over 4 years ago
Labels: Team: Docs, v7.9.0

#61 - [DOCS] Timeline Updates in 7.9

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 2 comments
Labels: Team: Docs, v7.9.0

#60 - [DOC] Rule fields Override and Rule Building blocks

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#59 - [DOCS] Create Threshold-based Rule type

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#58 - [7.9] "What's changed" - Security update overview

Issue - State: closed - Opened by caitlinbetz over 4 years ago - 5 comments
Labels: Team: Docs, v7.9.0

#57 - [DOCS] Rule Exceptions and Endpoint Exceptions

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 4 comments
Labels: Team: Docs, v7.9.0

#56 - [DOCS]: Endpoint Rule for endpoint alerts

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 2 comments
Labels: Team: Docs, v7.9.0

#55 - [7.x][DOCS] Updates location of machine learning source file

Pull Request - State: closed - Opened by lcawl over 4 years ago
Labels: backport

#54 - [DOCS]: Unified Detection Alerts View

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 3 comments
Labels: Team: Docs, v7.9.0

#53 - [DOCS]: 7.9 Release Notes

Issue - State: closed - Opened by jmikell821 over 4 years ago
Labels: Team: Docs, v7.9.0

#52 - [7.x] [Docs]Adds timeline schema and API (#50)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#51 - Test issue

Issue - State: closed - Opened by benskelker over 4 years ago

#50 - [Docs]Adds timeline schema and API

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#49 - [7.x] [Docs]Updates ToC - API and Reference Sections (#18)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#48 - [DOCS] Updates location of machine learning source file

Pull Request - State: closed - Opened by lcawl over 4 years ago - 1 comment
Labels: Team: Docs, v8.0.0, v7.9.0

#47 - [7.x] Change links to refactored Beats getting started docs

Pull Request - State: closed - Opened by dedemorton over 4 years ago
Labels: Team: Docs, backport

GitHub / elastic/security-docs issues and pull requests