New Feature Description
Recently, repeated sequences merged into elasticsearch EQL, which will require updates to support this.
Ex:
sequence
[process where opcode == 1] by unique_pid
[file where opcode == 0] by unique_pid with runs=2
[network where opcode == 0] by unique_pid
New Feature Description
Recently, repeated sequences merged into elasticsearch EQL, which will require updates to support this.
Ex: