[Data Telemetry] Add index pattern to identify "meow" attacks #75163
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
afharo
added
Feature:Telemetry
v8.0.0
release_note:skip
|
Pinging @elastic/kibana-telemetry (Team:KibanaTelemetry) |
|
@elasticmachine merge upstream |
💚 Build SucceededBuild metrics
History
To update your PR or re-run it, just comment with: |
This was referenced Aug 21, 2020
afharo
added a commit
to afharo/kibana
that referenced
this pull request
Aug 21, 2020
…c#75163) Co-authored-by: Elastic Machine <[email protected]>
afharo
added a commit
that referenced
this pull request
Aug 21, 2020
…75163) (#75644) Co-authored-by: Elastic Machine <[email protected]>
afharo
added a commit
that referenced
this pull request
Aug 21, 2020
…75163) (#75645) Co-authored-by: Elastic Machine <[email protected]> Co-authored-by: Elastic Machine <[email protected]>
gmmorris
added a commit
to gmmorris/kibana
that referenced
this pull request
Aug 21, 2020
* master: (71 commits) [Lens] Show 'No data for this field' for empty field in accordion (elastic#73772) Skip failing lens test Configure ScopedHistory consistenty regardless of URL used to mount app (elastic#75074) Fix returned payload by "search" usage collector (elastic#75340) [Security Solution] Fix missing key error (elastic#75576) Upgrade EUI to v27.4.1 (elastic#75240) Update datasets UI copy to data streams (elastic#75618) [Lens] Register saved object references (elastic#74523) [DOCS] Update links to Beats documentation (elastic#70380) [Enterprise Search] Convert our `public_url` route to `config_data` and collect initialAppData (elastic#75616) [Usage Collection Schemas] Remove Legacy entries (elastic#75652) [Dashboard First] Lens Originating App Breadcrumb (elastic#75470) Improve login UI error message. (elastic#75642) [Security Solution] modify circular deps checker to output images of circular deps graphs (elastic#75579) [Data Telemetry] Add index pattern to identify "meow" attacks (elastic#75163) Migrate CSP usage collector to `kibana_usage_collection` plugin (elastic#75536) [Console] Get ES Config from core (elastic#75406) [Uptime] Add delay in telemetry test (elastic#75162) [Lens] Use index pattern service instead saved object client (elastic#74654) Embeddable input (elastic#73033) ...
thomasneirynck
pushed a commit
to thomasneirynck/kibana
that referenced
this pull request
Aug 21, 2020
…c#75163) Co-authored-by: Elastic Machine <[email protected]>
|
I was wondering how this has been working and if there might be an easier way to identify owners that I am notifying with instructions on how to secure the open instances. Currently, I am running a shodan scan, aggregating the data, and notifying the larger providers of the IPs found with instructions. If not in this ticket is there another one that might be solving for this proactive alerting out to the security community? Thanks |
|
@agenest the changes will only take effect after 7.9.1 is released. Please reach out to Brian Milbier (@bmilbier), he has been working on a POC. @alexfrancoeur might also be able to help you out. |
lukeelmers
added
the
Team:Core
|
Pinging @elastic/kibana-core (Team:Core) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Adds
*meow*to the list of index patterns to identify possible indices following meow attacks 🐱For maintainers