Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Meta] Linux Investigation Guides - Part 2 #3269

Closed
6 of 7 tasks
Aegrah opened this issue Nov 13, 2023 · 5 comments
Closed
6 of 7 tasks

[Meta] Linux Investigation Guides - Part 2 #3269

Aegrah opened this issue Nov 13, 2023 · 5 comments

Comments

@Aegrah
Copy link
Contributor

Aegrah commented Nov 13, 2023

Summary

This is part 2 of the "add 10 new Linux IGs per sprint" resolution. I will be adding 10 new investigation guides with OSQuery extension this sprint.

The following tasks have been or are to be performed:

Tasks

Preview Give feedback

Additionally, while working on these IGs, @Mikaayenson 's generative AI IG creation work will be used. And feedback on these IGs will be added to https://github.com/elastic/elastic-genai-rulecraft/issues/5.

Feedback was presented in https://docs.google.com/document/d/1Xb6-XeMKEqecDgMTmstMks2Gsd12rkbVf0wvOwISXD8/edit

@Aegrah
Copy link
Contributor Author

Aegrah commented Nov 22, 2023

First PR with 4 new IGs for Linux Persistence related rules has been created: #3288. The next 6 will be added after PTO.

@Aegrah
Copy link
Contributor Author

Aegrah commented Dec 11, 2023

I will finish out the final IGs, this week. There has been slippage due to unexpected PTO.

@terrancedejesus
Copy link
Contributor

@Aegrah - Any chance we can get a tasklist in here to track the great work you have done and are going to finish? Will help with tracking at a higher level and correlation from meta -> issues (if applicable) -> PRs.

@Aegrah
Copy link
Contributor Author

Aegrah commented Dec 19, 2023

The second PR was created: #3350. Now all that is left, are reviews.

@Aegrah
Copy link
Contributor Author

Aegrah commented Dec 21, 2023

As the only thing that is left are the reviews, this meta will be closed.

@Aegrah Aegrah closed this as completed Dec 21, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants