Tags: aminemirat/detection-rules
Tags
update incomplete bug fix from 736 for 7.11 -> 7.10 downgrade logic
strip trailing slash in kibana_url only when defined
[New Rule] High Number of Process and/or Services Termination (elasti… …c#672) * [New Rule] High Number of Process and/or Services Termination * removed url and fixed ruleid * fixed tags * Update rules/windows/defense_evasion_stop_process_service_threshold.toml Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com> * Update rules/windows/defense_evasion_stop_process_service_threshold.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> * relinted * Update rules/windows/defense_evasion_stop_process_service_threshold.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> * Update rules/windows/defense_evasion_stop_process_service_threshold.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com> Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>