{"id":13618259,"url":"https://github.com/elastic/protections-artifacts","last_synced_at":"2025-05-14T19:02:24.051Z","repository":{"id":52378411,"uuid":"495971687","full_name":"elastic/protections-artifacts","owner":"elastic","description":"Elastic Security detection content for Endpoint","archived":false,"fork":false,"pushed_at":"2025-04-03T15:44:40.000Z","size":4385,"stargazers_count":1166,"open_issues_count":6,"forks_count":133,"subscribers_count":49,"default_branch":"main","last_synced_at":"2025-04-13T13:58:10.574Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://www.elastic.co/security/endpoint-security","language":"YARA","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/elastic.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-05-24T20:05:07.000Z","updated_at":"2025-04-12T15:55:34.000Z","dependencies_parsed_at":"2023-10-26T14:27:53.690Z","dependency_job_id":"2e91c583-1c60-4b8f-b45a-fdf614ae3592","html_url":"https://github.com/elastic/protections-artifacts","commit_stats":{"total_commits":161,"total_committers":11,"mean_commits":"14.636363636363637","dds":0.3291925465838509,"last_synced_commit":"d59600196a2d19f5ac8e25b603e811946eebe1d1"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fprotections-artifacts","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fprotections-artifacts/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fprotections-artifacts/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elastic%2Fprotections-artifacts/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/elastic","download_url":"https://codeload.github.com/elastic/protections-artifacts/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248724583,"owners_count":21151559,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T20:01:57.171Z","updated_at":"2025-04-13T13:58:17.780Z","avatar_url":"https://github.com/elastic.png","language":"YARA","funding_links":[],"categories":["YARA","Detection Rules"],"sub_categories":["Blog Posts / Series"],"readme":"[![ATT\u0026CK navigator coverage](https://img.shields.io/badge/ATT\u0026CK-Navigator-red.svg)](https://ela.st/protections-artifacts-navigator)\n\u003ch1\u003e\u003cimg src=\"https://static-www.elastic.co/v3/assets/bltefdd0b53724fa2ce/blt786d938064f8c8be/5e0e7b96fb35e665aed32798/logo-endpoint-32-color.svg\"/\u003e  Protections Artifacts\u003c/h1\u003e\n\n\nElastic Security prevents ransomware and malware, detects advanced threats, and arms responders with vital context. It’s free and open, ready for every endpoint.\n\nProtections-Artifacts is the home of our detection logic (rules, yara, etc) for [Elastic Security for endpoint](https://www.elastic.co/security/endpoint-security). At Elastic, we believe that being open and transparent is critical for the success of us and our users. Check out our [blog post](https://www.elastic.co/blog/continued-leadership-in-open-and-transparent-security) if you are interested in additional background.\n\n# Directory\n\nBelow you will find the artifacts we have opened in this repository:\n\n| Folder | Description |\n| ------ | ----------- |\n| [`behavior/`](behavior/) | EQL based malicious behavior rules |\n| [`yara/`](yara) | Yara rules for malware protection |\n| [`ransomware/`](ransomware/) | Elastic ransomware protection artifact  |\n\n# Questions? Problems? Suggestions?\n\nIf you would like you to provide feedback or contribute to this repository, please familiarize yourself with the applicable artifact’s readme and [open an issue](https://github.com/elastic/protections-artifacts/issues/new/choose) using one of the provided templates. We cannot accept pull requests at this time because this repository is automatically generated.\n\nYou can also reach us in our [Slack Workspace](https://www.elastic.co/blog/join-our-elastic-stack-workspace-on-slack) or in the [Security Discuss](https://discuss.elastic.co/c/security/) forum.\n\n# License\n\nCopyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one or more contributor license agreements. Licensed under the Elastic License 2.0; you may not use these artifacts except in compliance with the Elastic License 2.0\n\nContributors must sign a [Contributor License Agreement](https://www.elastic.co/contributor-agreement) before contributing code to any Elastic repositories.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felastic%2Fprotections-artifacts","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Felastic%2Fprotections-artifacts","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felastic%2Fprotections-artifacts/lists"}