All pull requests

Pull requests

• Add process.ai_agent fields to file and network events

  v9.6.0
  #813·stanek-michal opened Oct 15, 2026Contributor·1 of 2 tasks·

  ·
  2

• Map content-free AI tool exposure findings in Endpoint alerts

  #812·Mikaayenson opened Oct 14, 2026·5 of 7 tasks·

  ·

• Add call_stack fields to rule_detection_event alerts

  v9.6.0
  #811·AsuNa-jp opened Oct 9, 2026Contributor·1 of 2 tasks·

  ·
  

• Document Windows UDP flow lifecycle events

  #804·bit-envoy opened Sep 28, 2026Contributor·

  ·
  6

  

• Change AiAuth events to use a unique event type, without enrichment

  #801·fearful-symmetry opened Sep 17, 2026Contributor·1 of 5 tasks·

  ·
  

• Add process_vm_access attempt fields for Linux process events

  #800·Aegrah opened Sep 16, 2026Contributor·

  ·

• Add Linux file open (event_on_access) event fields

  #798·Aegrah opened Sep 14, 2026Contributor·

  ·

• [9.6] Add ECS fields for NTDLL enrichment during VirtualProtect/Ex events

  Team: Endpoint Protectionsv9.6.0
  #764·ig-commits opened Jul 13, 2026·1 task done·

  ·
  5

  

• Split metadata_united transform into stateful and serverless variants

  #750·szwarckonrad opened Jun 30, 2026Contributor·

  ·

• Add diag_documents_volume

  #691·nicholasberlin opened Oct 3, 2025Contributor·1 task done·

  ·
  2

  

• Custom Documentation

  #606·brian-mckinney opened Mar 28, 2025Contributor·

  ·
  26

• Allow Rerouting Processor for Elastic Defend

  #477·ChriZzn opened Feb 26, 2024·

  ·

• [WIP] Removes "required" field attribute

  #429·pzl opened Sep 25, 2023Member·

  ·
  1

• [WIP] Release Script helpers

  #343·pzl opened Feb 9, 2023Member·

  ·
  1