All pull requests

Pull requests

• Update release-drafter/release-drafter action to v7.8.0

  backport: autocommunity
  #6941·elastic-renovate-prod[bot] opened Oct 1, 2026Bot·1 task·

  ·

• Update dependency ruff to v0.16.10

  backport: autocommunity
  #6940·elastic-renovate-prod[bot] opened Oct 1, 2026Bot·1 task·

  ·

• [New Rule] NetScaler Superuser Binding Followed by Authentication Control Removal

  backport: autoDomain: NetworkRule: New
  #6939·eric-forte-elastic opened Oct 1, 2026Contributor·5 tasks·

  ·
  1

  

• [New] Azure Foundry Detection Rules

  backport: autoDomain: GenAIIntegration: Microsoft FoundrypatchRule: New
  #6938·Samirbous opened Oct 1, 2026Contributor·

  ·
  32

  

• [New Rule] Polygon RPC Resolution Followed by External TLS Connection

  backport: autoDomain: NetworkRule: New
  #6937·eric-forte-elastic opened Oct 1, 2026Contributor·5 tasks·

  ·
  1

  

• [Rule Tuning] Entra ID Federated Identity Credential Modified

  backport: autoDomain: CloudDomain: IdentityIntegration: AzureRule: Tuning
  #6936·terrancedejesus opened Oct 1, 2026Contributor·

  ·
  4

  

• Update dependency pyflakes to v4.0.1

  backport: autocommunity
  #6935·elastic-renovate-prod[bot] opened Sep 30, 2026Bot·1 task·

  ·

• [New Hunt] Cisco SD-WAN CVEs

  Hunt: New
  #6934·eric-forte-elastic opened Sep 30, 2026Contributor·5 tasks·

  ·
  

• Update elastic/docs-actions digest to 33f38e5

  backport: autocommunity
  #6932·elastic-renovate-prod[bot] opened Sep 30, 2026Bot·1 task·

  ·

• [Rule Tuning] Github tunings

  backport: autocurrentreleaseIntegration: GitHubRule: Tuning
  #6930·bryans3c opened Sep 30, 2026Contributor·

  ·
  10

  

• [FR] Cache ES|QL parses and memoize the offline ES|QL schema helpers

  esqlpatchpython
  #6926·eric-forte-elastic opened Sep 28, 2026Contributor·5 tasks·

  ·
  

• [Bug] Fix updated date unit tests on PRs not to main

  backport: autobugpatchtest-suite
  #6925·eric-forte-elastic opened Sep 28, 2026Contributor·5 tasks·

  ·
  1

  

• [FR] Validate patterns with Lucene's regex syntax

  backport: autoenhancementpatchpythontest-suite
  #6924·eric-forte-elastic opened Sep 28, 2026Contributor·5 tasks·

  ·
  4

  

• [Rule Tuning] Add Composer, RubyGems, Go, and Gradle to Elastic Defend Package Manager Ancestry (#6605)

  backport: autocommunityRule: Tuning
  #6923·SecByShresth opened Sep 28, 2026·

  ·
  1

  2

• [Rule Tuning] Azure VM Extension Deployment by User

  backport: autoDomain: CloudIntegration: AzureRule: Tuning
  #6921·terrancedejesus opened Sep 28, 2026Contributor·3 tasks done·

  ·
  2

  

• [Rule Tuning] Access to a Sensitive LDAP Attribute

  backport: autoDomain: Endpointgenai-tradecraftOS: WindowsRule: Tuning
  #6918·tradebot-elastic opened Sep 28, 2026Contributor·

  ·
  1

  

• Update dependency nodeenv to v1.11.0

  backport: autocommunitypatch
  #6911·elastic-renovate-prod[bot] opened Sep 26, 2026Bot·1 task·

  ·

• [Bug] Naive split causing value error in attack.py

  backport: autopatchpython
  #6908·eric-forte-elastic opened Sep 25, 2026Contributor·5 tasks·

  ·
  1

  4

  

• [FR] [DaC] Update Cross Cluster Search support

  backport: autodetections-as-codepatchpythonschema
  #6904·eric-forte-elastic opened Sep 24, 2026Contributor·5 tasks·

  ·
  5

  

• [New Rule] GitHub Webhook Created or Configuration Changed

  backport: autoIntegration: GitHubRule: New
  #6899·bryans3c opened Sep 24, 2026Contributor·5 tasks·

  ·
  6

  

• [New Rule] GitHub User SSH Key Added

  backport: autoIntegration: GitHubRule: New
  #6898·bryans3c opened Sep 24, 2026Contributor·5 tasks·

  ·
  3

  

• [New Rule] GitHub Outside Collaborator Added to Repository

  backport: autoIntegration: GitHubRule: New
  #6897·bryans3c opened Sep 24, 2026Contributor·5 tasks·

  ·
  6

  

• [New Rule] GitHub Actions or Integration Secret Created

  backport: autoIntegration: GitHubRule: New
  #6895·bryans3c opened Sep 24, 2026Contributor·5 tasks·

  ·
  2

  

• [New Rule] GitHub Sign-in from Unrecognized Device

  backport: autoIntegration: GitHubRule: New
  #6894·bryans3c opened Sep 24, 2026Contributor·5 tasks·

  ·
  3

  

• [New Rule] GitHub PAT or SSH Key Added from Unusual User Agent

  backport: autoIntegration: GitHubpatchRule: Newschema
  #6893·bryans3c opened Sep 24, 2026Contributor·5 tasks·

  ·
  1