Elastic Security
Named by 3 kept items in this workspace.
2 items name it under tools and 1 under affected products.
Search every workspace for Elastic Security. It matches the name as written, so it can find other things that share it.
The items that name it 3
public ruleset analyzed for detection-logic bug patterns
SIEM API import connector
Provides detection rules referenced in the post: one monitoring insmod process execution, and the 'Kernel Driver Load' rule using auditd for syscall-level detection.
All technologies in this workspace.