kibana.alert.rule[.]nameDomain

Reported by 1 independent source · first reported 24 Apr 2023 by Elastic Security Labs · last reported 24 Mar 2026

Last reported 7 months ago

What the reports say

3 reports, newest first · the exact sentence from each

“rules_triggered = VALUES(kibana.alert.rule[.]name),”

Elastic Security LabsVendor24 Mar 2026
Security Automation with Elastic Workflows: From Alert to Response
“| WHERE kibana.alert.rule[.]name is not null and kibana.alert.workflow_status == "open"”

Elastic Security LabsVendor24 Feb 2026
Beyond Behaviors: AI-Augmented Detection Engineering with ES|QL COMPLETION
“"kibana.alert.rule[.]name",”

Elastic Security LabsVendor24 Apr 2023
Exploring the Future of Security with ChatGPT

Indicators reported together

named in the same reports

output[.]idin 1 report
kibana.alert.rule.threat.tactic[.]namein 1 report
kibana.alert.rule.threat.technique[.]namein 1 report
hxxp://10.100.100[.]10/machine?comp=goalstatein 1 report
hxxp://10.100.100[.]10:9090/revershell.exein 1 report
hxxp://192.168.1[.]100/payload.exein 1 report

Copy these 6 indicators · defanged

6 indicators, defanged, one per line

output[.]id
kibana.alert.rule.threat.tactic[.]name
kibana.alert.rule.threat.technique[.]name
hxxp://10.100.100[.]10/machine?comp=goalstate
hxxp://10.100.100[.]10:9090/revershell.exe
hxxp://192.168.1[.]100/payload.exe

Thanks — we review every report.

Report a wrong value