-
Notifications
You must be signed in to change notification settings - Fork 61
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
feat(windows-eventlog): collect System 104 and ship log-clearing rules in the Essential pack
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#559 In Karib0u/rustinel;feat(windows-etw): alert when an ETW provider is disabled while running
enhancementNew feature or requestNew feature or requestsecuritySecurity-related maintenanceSecurity-related maintenancesensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#558 In Karib0u/rustinel;feat(alerts): agent heartbeat and shutdown alerts
enhancementNew feature or requestNew feature or requestobservabilityTelemetry and operational visibilityTelemetry and operational visibilitysecuritySecurity-related maintenanceSecurity-related maintenanceStatus: Open.#557 In Karib0u/rustinel;feat(windows-etw): add raw_access_thread from raw device reads
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#554 In Karib0u/rustinel;feat(windows-etw): add create_stream_hash for NTFS ADS
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#553 In Karib0u/rustinel;feat(windows-etw): add bounded sensitive file_access reads
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#551 In Karib0u/rustinel;feat(windows-etw): add create_remote_thread from thread starts
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#550 In Karib0u/rustinel;feat(windows-etw): classify kernel image loads as driver_load
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#548 In Karib0u/rustinel;feat(windows-eventlog): collect the domain-controller Security audit events deferred from #479
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#544 In Karib0u/rustinel;feat(windows-etw): recover rename source paths and file creation times
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#488 In Karib0u/rustinel;feat(windows-eventlog): collect TaskScheduler task lifecycle events
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#487 In Karib0u/rustinel;feat(windows-eventlog): collect System events beyond 7045 and expose Event Log header fields
enhancementNew feature or requestNew feature or requestsensorSensor and telemetry workSensor and telemetry workwindowsWindows supportWindows supportStatus: Open.#484 In Karib0u/rustinel;