elastic / elastic/detection-rules
[New Rule] Less Persistence
Open
Rule: New
Team: TRADE
- Dominant language
- Python
- Stars
- 2.7k
- Forks
- 696
- Avg merge
- 4d 17h
- Merged PRs (30d)
- 87
Description
### Description
Create a rule targeting `less` persistence.
Ref: https://osdfir.blogspot.com/2025/09/less-is-more.html
Contributor guide
Assessment
This issue has not been assessed yet.