elastic/security-docs issues and pull requests

#5758 - Editing rules independently of source data

Issue - State: open - Opened by e40pud 5 months ago - 1 comment
Labels: enhancement, Team: Detections/Response, Docset: Serverless, Docset: ESS, v8.16.0

#5739 - [BUG][ESS] Refresh the Optimizing anomaly results topic

Pull Request - State: closed - Opened by nastasha-solomon 6 months ago - 4 comments
Labels: Feature: Machine Learning, Priority: Medium, Effort: Medium, Team: Entity Analytics, v8.15.0, v8.16.0

#5739 - [BUG][ESS] Refresh the Optimizing anomaly results topic

Pull Request - State: closed - Opened by nastasha-solomon 6 months ago - 4 comments
Labels: Feature: Machine Learning, Priority: Medium, Effort: Medium, Team: Entity Analytics, v8.15.0, v8.16.0

#5735 - SentinelOne bidirectional `processes`, `kill-process`, and detection rule updates [ESS]

Pull Request - State: closed - Opened by joepeeples 6 months ago - 1 comment
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, Docset: ESS, v8.16.0

#5732 - [Request] Added IS operator under Windows Signature in Blocklist view

Issue - State: closed - Opened by szwarckonrad 6 months ago
Labels: enhancement, Team: EDR Workflows, Feature: Elastic Defend, Docset: Serverless, Docset: ESS, v8.16.0

#5703 - [DE Team][8.16] Case system action being added for rules

Pull Request - State: closed - Opened by nastasha-solomon 6 months ago - 2 comments
Labels: Feature: Rules, Feature: Connectors, Team: Detection Engine, Docset: ESS, ci:doc-build, v8.16.0

#5662 - [Docs IA][ESS] Rework the Elastic Endpoint section

Issue - State: open - Opened by benironside 6 months ago
Labels: Effort: Large, Docset: ESS

#5659 - SentinelOne bidirectional `processes`, `kill-process`, and detection rule updates [serverless]

Pull Request - State: closed - Opened by joepeeples 6 months ago - 5 comments
Labels: Team: EDR Workflows, backport-skip, Feature: Response actions, Docset: Serverless, ci:doc-build

#5638 - [Request] Document the availability of `processes` response actions for SentinelOne hosts

Issue - State: closed - Opened by paul-tavares 6 months ago
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, v8.16.0

#5637 - [Request] Update SentinelOne bi-directional response actions instructions with new requirements for setting up the SIEM rule

Issue - State: closed - Opened by paul-tavares 6 months ago
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, v8.16.0

#5631 - [8.16] Manual rule run docs

Pull Request - State: open - Opened by nastasha-solomon 6 months ago - 1 comment
Labels: Feature: Rules, Team: Detection Engine, Priority: Medium, Effort: Medium, Docset: ESS, v8.16.0

#5621 - Revert "Scan response action [ESS]"

Pull Request - State: closed - Opened by joepeeples 6 months ago - 2 comments
Labels: Team: EDR Workflows, Feature: Elastic Defend, Feature: Response actions, Docset: ESS, v8.15.0

#5607 - [Request] 3P Integrations data in native Posture workflows

Issue - State: open - Opened by smriti0321 7 months ago
Labels: documentation, v8.16.0

#5606 - [Request] Agentless deployment option for CSPM to be documented with Beta tag

Issue - State: open - Opened by smriti0321 7 months ago - 1 comment
Labels: documentation, v8.16.0

#5590 - [Request] Document the `kill-process` response action available for SentinelOne

Issue - State: closed - Opened by paul-tavares 7 months ago
Labels: Team: EDR Workflows, Feature: Response actions, Effort: Medium, Docset: Serverless, Docset: ESS, v8.16.0

#5589 - [Serverless] Manual rule run docs

Pull Request - State: open - Opened by nastasha-solomon 7 months ago - 6 comments
Labels: backport-skip, Feature: Rules, Team: Detection Engine, Priority: High, Effort: Large, Docset: Serverless, ci:doc-build

#5501 - Update .backportrc.json: remove 7.x preset

Pull Request - State: closed - Opened by joepeeples 7 months ago - 2 comments
Labels: Team: Docs, backport-skip

#5500 - Update backport tool & Mergify configs for new 8.15 branch

Pull Request - State: closed - Opened by joepeeples 7 months ago - 1 comment
Labels: Team: Docs, backport-skip

#5492 - [Request] Permissions for alert suppression in machine learning rules

Issue - State: open - Opened by joepeeples 7 months ago - 2 comments
Labels: Feature: Alerts, Feature: Rules, Feature: Machine Learning, Team: Detection Engine, Effort: Medium, Docset: Serverless, Docset: ESS, v8.15.0

#5483 - [Request] Document filtering out cold/frozen data tiers during rule execution

Issue - State: closed - Opened by vitaliidm 8 months ago - 2 comments
Labels: Team: Security Solution, Feature: Rules, Team: Detection Engine, Docset: ESS, v8.16.0

#5457 - [DE Team][8.16 & Serverless] Case system action being added for rules

Issue - State: closed - Opened by dhurley14 8 months ago - 2 comments
Labels: documentation, Feature: Rules, Feature: Connectors, Team: Detection Engine, new-feature

#5441 - [Request][Serverless][8.16] New notes experience

Issue - State: open - Opened by nastasha-solomon 8 months ago - 1 comment
Labels: Team: Threat Hunting, Feature: Timeline, Priority: High, Effort: Large, v8.16.0

#5374 - Endpoint troubleshooting docs - windows performance[Request]

Issue - State: open - Opened by caitlinbetz 8 months ago - 2 comments
Labels: Team: Endpoint, troubleshooting, Feature: Elastic Defend, Effort: Large, Docset: Serverless, Docset: ESS

#5337 - [Request] 8.16 Security Assistant Custom Knowledge Bases

Issue - State: open - Opened by spong 8 months ago - 1 comment
Labels: Team: GenAI, Effort: X-Large

#5302 - Backport upgrade guide changes to versions `7.17-8.9`

Issue - State: closed - Opened by jmikell821 8 months ago - 1 comment
Labels: Feature: Upgrading

#5301 - [Enhancement]: Describe role privilege requirements needed for setup of detections in serverless

Issue - State: closed - Opened by dhurley14 8 months ago - 5 comments
Labels: enhancement, Team: Detections/Response

#5275 - [Detection Rules] Adding Documents for v8.13.8 Pre-Built Detection Rules

Pull Request - State: closed - Opened by protectionsmachine 8 months ago - 1 comment
Labels: Feature: Prebuilt rules, v8.13.0

#5264 - [Request] Documentation for Manual Run of Security rules

Issue - State: open - Opened by nkhristinin 8 months ago - 7 comments
Labels: Feature: Rules, Team: Detection Engine, Priority: High, Effort: Large, Docset: Serverless, Docset: ESS, v8.16.0

#5257 - DO NOT MERGE — Test CI build of AsciiDoc docs

Pull Request - State: closed - Opened by joepeeples 9 months ago - 3 comments
Labels: backport-skip

#5256 - DO NOT MERGE - Test serverless source file move

Pull Request - State: closed - Opened by joepeeples 9 months ago - 3 comments
Labels: backport-skip

#5130 - [BUG] document maxsize for get-file response action

Issue - State: open - Opened by 111andre111 10 months ago - 7 comments
Labels: bug

#5066 - New nav in ESS

Issue - State: open - Opened by nastasha-solomon 10 months ago - 3 comments
Labels: Team: Threat Hunting, Priority: High, Effort: Large, Docset: ESS, v8.16.0

#5063 - [Request] Document new `rule_source` property for rules in the API schema (DRAFT)

Issue - State: closed - Opened by jpdjere 10 months ago - 2 comments
Labels: v8.18.0

#5063 - [Request] Document new `rule_source` property for rules in the API schema (DRAFT)

Issue - State: closed - Opened by jpdjere 10 months ago - 2 comments
Labels: v8.18.0

#5061 - [Request] Prebuilt rule customization, upgrade, and export/import workflows

Issue - State: open - Opened by jpdjere 10 months ago - 1 comment
Labels: Team: Detections/Response, Feature: Rules, Feature: Prebuilt rules, Docset: Serverless, Docset: ESS, v8.18.0, v9.0.0

#4914 - [WIP] Add serverless source files to `security-docs` repo

Pull Request - State: closed - Opened by joepeeples 11 months ago - 4 comments
Labels: backport-skip, Docset: Serverless

#4675 - [Request] Entity Analytics: Managed user data in user details flyout

Issue - State: closed - Opened by natasha-moore-elastic about 1 year ago - 3 comments
Labels: Feature: Entity Analytics, Priority: Medium, Effort: Medium, Team: Entity Analytics

#4460 - [enhancement]: Add to our documentation the per protection-artifacts rules

Issue - State: open - Opened by 111andre111 about 1 year ago - 1 comment
Labels: enhancement, Team: Detections/Response, trade-artifacts, blocked

#4411 - DO NOT MERGE - Another test, old preview action removed

Pull Request - State: closed - Opened by joepeeples about 1 year ago - 2 comments
Labels: backport-skip

#4395 - DO NOT MERGE - Test new preview GitHub action

Pull Request - State: closed - Opened by joepeeples about 1 year ago - 4 comments
Labels: backport-skip

#4355 - [Meta] Versioning for Elastic Agent, Endpoint, Beats [Serverless]

Issue - State: closed - Opened by joepeeples about 1 year ago - 1 comment
Labels: meta, Priority: Medium, Effort: X-Large, Docset: Serverless

#4351 - [Meta] Cross-cluster search in serverless?

Issue - State: closed - Opened by joepeeples about 1 year ago - 1 comment
Labels: enhancement, meta, Priority: Medium, Docset: Serverless, Effort: Meta

#4350 - Ingest page - validate ingest methods (Beats, etc.) [Serverless]

Issue - State: closed - Opened by joepeeples about 1 year ago - 1 comment
Labels: Priority: Medium, Effort: Medium, Docset: Serverless

#4141 - [BUG] Wrong reference in CSPM for AWS docs

Pull Request - State: closed - Opened by joepeeples over 1 year ago - 2 comments
Labels: bug, Feature: CSPM, v8.10.0, v8.11.0, Docset: ESS

#4102 - Reconstruct requirements pages for Serverless [Serverless]

Issue - State: closed - Opened by joepeeples over 1 year ago - 1 comment
Labels: revision, Priority: Medium, Effort: Large, Docset: Serverless

#4021 - [Detection Engine][Exceptions] - Update docs for single and shared exceptions

Pull Request - State: open - Opened by nastasha-solomon over 1 year ago - 3 comments
Labels: API, Feature: Exceptions, v8.7.0, v8.8.0, v8.9.0, Team: Detection Engine, Priority: Medium, v8.10.0, Effort: Medium, v8.11.0, v8.12.0, v8.13.0, v8.14.0, v8.15.0, v8.16.0

#4004 - Fix title of artifact control page

Pull Request - State: closed - Opened by joepeeples over 1 year ago - 1 comment
Labels: bug, Team: EDR Workflows, Feature: Elastic Defend, v8.11.0

#3998 - [BUG] Style and screenshot fixes to the Optimizing anomaly results topic

Issue - State: closed - Opened by nastasha-solomon over 1 year ago - 6 comments
Labels: bug, Feature: Machine Learning, Priority: Medium, Effort: Medium, Team: Entity Analytics, blocked, v8.15.0, v8.16.0

#3998 - [BUG] Style and screenshot fixes to the Optimizing anomaly results topic

Issue - State: closed - Opened by nastasha-solomon over 1 year ago - 6 comments
Labels: bug, Feature: Machine Learning, Priority: Medium, Effort: Medium, Team: Entity Analytics, blocked, v8.15.0, v8.16.0

#3890 - Meta: Elastic Endpoint and Elastic Agent doc revamp

Issue - State: open - Opened by jmikell821 over 1 year ago
Labels: Team: Endpoint, Team: EDR Workflows, revision, Priority: High, Effort: Meta

#3182 - Missing documentation for a few Endpoint exported fields

Issue - State: open - Opened by jeanfabrice almost 2 years ago
Labels: Team: Endpoint, Feature: Elastic Defend, v8.8.0, Feature: Integrations, Priority: Medium, Effort: Large

#2830 - Document how to troubleshoot/disable Endpoint's self healing feature on Windows

Issue - State: closed - Opened by ferullo about 2 years ago - 4 comments
Labels: Team: Endpoint, troubleshooting, v8.7.0, Priority: Medium, Effort: Medium

#2737 - [DOCS] placeholders to rule action fields - improve documentation to specify which fields are arrays

Pull Request - State: closed - Opened by joepeeples about 2 years ago - 4 comments
Labels: Team: Docs, Team: Detections/Response, edit, Feature: Rules, v8.4.0, v8.5.0, v8.6.0, v8.7.0, v8.8.0, v8.9.0, Effort: Medium

#1275 - [BUG] Diagram of Elastic Security workflow is incomplete

Issue - State: closed - Opened by nastasha-solomon about 3 years ago - 4 comments
Labels: bug, Team: Docs, v7.16.0

#343 - [DOCS] EQL: Add doc for common troubleshooting errors

Issue - State: closed - Opened by jmikell821 over 4 years ago
Labels: Feature: EQL, Team: Threat Hunting, v7.13.0

#102 - [Docs]Fixes API TOC 7.x

Pull Request - State: closed - Opened by benskelker over 4 years ago

#101 - [7.9] makes admin overview a first-level section (#99)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#100 - [7.x] makes admin overview a first-level section (#99)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#99 - [Docs]Makes admin overview a first-level section

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#98 - [Docs]7.9 backport admin page overview

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#97 - [Docs]Backport admin page overview 7.x

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#96 - [DOCS]: Admin Page Overview

Pull Request - State: closed - Opened by jmikell821 over 4 years ago

#95 - [7.9] [Docs]Timeline and Template UI updates (#84)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#94 - [7.x] [Docs]Timeline and Template UI updates (#84)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#93 - [7.9] [Docs]Detections and Alerts UI (#73)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#92 - [7.x] [Docs]Detections and Alerts UI (#73)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#91 - [7.9] Merge pull request #76 from elastic/toc-directory-structure

Pull Request - State: closed - Opened by narcher7 over 4 years ago
Labels: backport

#90 - [7.x] Merge pull request #76 from elastic/toc-directory-structure

Pull Request - State: closed - Opened by narcher7 over 4 years ago
Labels: backport

#89 - [7.9] Merge pull request #81 from elastic/hosts-overview (#81)

Pull Request - State: closed - Opened by jmikell821 over 4 years ago
Labels: backport

#88 - [7.x] Merge pull request #81 from elastic/hosts-overview (#81)

Pull Request - State: closed - Opened by jmikell821 over 4 years ago
Labels: backport

#87 - [7.9] [Docs]Update prebuilt rule descriptions (#66)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#86 - [7.x] [Docs]Update prebuilt rule descriptions (#66)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#85 - [DOCS] Intro to Elastic Security

Pull Request - State: closed - Opened by jmikell821 over 4 years ago - 5 comments

#84 - [Docs]Timeline and Template UI updates

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#83 - [7.9] [Docs][Cases]7.9 Cases updates (#64)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#82 - [7.x] [Docs][Cases]7.9 Cases updates (#64)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#81 - [DOCS]: Hosts Overview

Pull Request - State: closed - Opened by jmikell821 over 4 years ago

#80 - [DOCS] Host Page Overview

Issue - State: closed - Opened by jmikell821 over 4 years ago
Labels: Team: Docs, v7.9.0

#79 - [7.9] Editing the Endpoint Security Integration

Issue - State: closed - Opened by caitlinbetz over 4 years ago
Labels: Team: Docs, v7.9.0

#78 - [DOCS] Tooltips needed for the timeline action dropdown and next to “add value list” button

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 2 comments
Labels: Team: Docs, v7.9.0

#77 - [DOCS] Wording needed to clarify Exceptions are linked to a Rule

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#76 - [Docs]Create initial directory structure based on TOC.

Pull Request - State: closed - Opened by narcher7 over 4 years ago

#75 - [7.9] [Docs]Updates detections API (#70)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#74 - [7.x] [Docs]Updates detections API (#70)

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: backport

#73 - [Docs]Detections and Alerts UI

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#71 - [Docs]Detections API updates

Issue - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#70 - [Docs]Updates detections API

Pull Request - State: closed - Opened by benskelker over 4 years ago - 1 comment
Labels: v7.9.0

#69 - [Docs]Add a what's new/breaking changes sections

Issue - State: closed - Opened by benskelker over 4 years ago - 1 comment
Labels: v7.9.0

#68 - [DOCS]: Document exceptions guideline for prebuilt rules

Issue - State: closed - Opened by jmikell821 over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#67 - Update prebuilt job descriptions for 7.9

Issue - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#66 - [Docs]Update prebuilt rule descriptions

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#65 - 7.9 Cases updates

Issue - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#64 - [Docs][Cases]7.9 Cases updates

Pull Request - State: closed - Opened by benskelker over 4 years ago
Labels: v7.9.0

#63 - [7.9] Endpoint Package/Integration documentation

Issue - State: closed - Opened by caitlinbetz over 4 years ago
Labels: Team: Docs, v7.9.0

#62 - [7.9] Endpoint ECS mapping

Issue - State: closed - Opened by caitlinbetz over 4 years ago
Labels: Team: Docs, v7.9.0

#61 - [DOCS] Timeline Updates in 7.9

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 2 comments
Labels: Team: Docs, v7.9.0

#60 - [DOC] Rule fields Override and Rule Building blocks

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#59 - [DOCS] Create Threshold-based Rule type

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 1 comment
Labels: Team: Docs, v7.9.0

#58 - [7.9] "What's changed" - Security update overview

Issue - State: closed - Opened by caitlinbetz over 4 years ago - 5 comments
Labels: Team: Docs, v7.9.0

#57 - [DOCS] Rule Exceptions and Endpoint Exceptions

Issue - State: closed - Opened by dontcallmesherryli over 4 years ago - 4 comments
Labels: Team: Docs, v7.9.0

GitHub / elastic/security-docs issues and pull requests