Elastic Security opens public detection rules repo

Elastic introduces a public detection-rules GitHub repository for Elastic Security, detailing its rule content (KQL/Lucene, future EQL, ML jobs), ECS-based portability, metadata standards, and contribution/testing workflows. The post explains the behavioral detection philosophy tied to MITRE ATT&CK, performance best practices, and how users receive rule updates in the detection engine, inviting community collaboration and contributions.