My First Rule

Last updated 3 days ago on 2024-12-19

Created 2 years ago on 2022-09-22

About

This rule helps you test and practice using alerts with Elastic Security as you get set up. It’s not a sign of threat activity.

Tags: Use Case: Guided Onboarding
Severity: low
Risk Score: 21
False Positive Examples: This rule is not looking for threat activity. Disable the rule if you're already familiar with alerts.
License: Elastic License v2(opens in a new tab or window)

event.kind:event

Install detection rules in Elastic Security

Detect My First Rule in the Elastic Security detection engine by installing this rule into your Elastic Stack.