mirror of
https://github.com/elastic/kibana.git
synced 2025-06-27 18:51:07 -04:00
Endpoint Advanced Policy Option: advanced.events.check_debug_registers
(#167308)
## Summary New advanced Endpoint/Defend option. See its description for details. ### Checklist Delete any items that are not applicable to this PR. - [x] Any text added follows [EUI's writing guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses sentence case text and includes [i18n support](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md) <!--ONMERGE {"backportTargets":["8.9"]} ONMERGE--> Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
This commit is contained in:
parent
d9b026d7e1
commit
4c4b2d4497
1 changed files with 11 additions and 0 deletions
|
@ -1351,4 +1351,15 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
|
|||
}
|
||||
),
|
||||
},
|
||||
{
|
||||
key: 'windows.advanced.events.check_debug_registers',
|
||||
first_supported_version: '8.11',
|
||||
documentation: i18n.translate(
|
||||
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.check_debug_registers',
|
||||
{
|
||||
defaultMessage:
|
||||
'Check debug registers inline to detect the use of hardware breakpoints. Malware may use hardware breakpoints to forge benign-looking call stacks. Default: true',
|
||||
}
|
||||
),
|
||||
},
|
||||
];
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue