Elastic Yara Signatures
Open-source detection logic (rules, YARA, ransomware protection) for Elastic Security's endpoint protection platform.
What is Elastic Yara Signatures?
Protections Artifacts is the open-source repository containing detection logic for Elastic Security's endpoint protection platform. It includes behavioral rules, YARA signatures, and ransomware protection artifacts that enable the platform to prevent and detect threats. The project provides transparency into the security detection capabilities powering Elastic's commercial endpoint security solution.
Security engineers, threat hunters, and organizations using or evaluating Elastic Security for endpoint protection who want visibility into detection logic.
It offers full transparency into the detection rules powering a leading endpoint security platform, enabling trust, community feedback, and alignment with open security principles without requiring self-hosting.
Overview
Elastic Security detection content for Endpoint
Use Cases
Best For
- Reviewing detection logic for Elastic Security endpoint deployments
- Understanding behavioral threat detection rules using EQL
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
