-
I have alerts regarding blacklisted client and server contact made by an IP from IPsum Threat Intelligence Feed but in the timeseries I do not see any hit.
-
Enjoy
https://github.com/scafroglia93/blocklists
-
What is the bug?
I only have access to security-auditlog-* indices in Select Index/Aliases in Configure logs scan (Threat Intelligence)
How can one reproduce the bug?
Steps to reproduce the behav…
-
Please add HaGeZi's Threat Intelligence Feeds DNS Blocklist
A blocklist for blocking malware, cryptojacking, scam, spam and phishing. Blocks domains known to spread malware, launch phishing attacks a…
-
**Kibana version**:
8.12, but potentially exists in all previous versions as well
**Description of the problem including expected versus actual behavior**:
When viewing threat intelligence resp…
-
**What is the bug?**
The threat intel module is not creating proper alerts after matching the IoCs.
When using the the {{#ctx.alerts}} it returns empty - Different from using standard detectors in t…
-
### Community Note
- Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the…
-
Windows Defender at the latest rev (Security intelligence version: 1.419.751.0, Version created on: 2024-10-28 02:15) rejects smartthings.msi and smartthings.zip rev 1.10.2 (and also 1.10.1) as "sever…
jds13 updated
3 weeks ago
-
### Found broken link in https://docs.sekoia.io/stylesheets/lightgallery.min.css
- [x] Link '' that points on https://docs.sekoia.io/fonts/lg.ttf?22t19m) is broken (404 Not Found)
- [x] Link '' that…
-
### Check for previous/existing GitHub issues
- [x] I have checked for previous/existing GitHub issues
### Issue Type?
Bug
### (Optional) Module Version
v0.5.0
### (Optional) Correlation Id
_No…