logs-endpoint[.]eventsDomain
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 3 months ago
What the reports say
3 reports, newest first · the exact sentence from each-
Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3“| macOS Forensics | macOS endpoint | logs-endpoint[.]events.*, process entity IDs |”
-
How Elastic Infosec Optimizes Defend for Cost and Performance“In the following ES|QL queries we use the logs-endpoint[.]events* index pattern.”
-
Streamlining ES|QL Query and Rule Validation: Integrating with GitHub CI“from logs-endpoint[.]events.*”
Indicators reported together
named in the same reports- user[.]emailin 1 report
- advanced[.]eventsin 1 report
- logs-endpoint.events[.]ciin 1 report
- re[.]searchin 1 report
- client[.]infoin 1 report
Copy these 5 indicators · defanged
Thanks — we review every report.