This rule is triggered when indicators from the Threat Intel Filebeat module (v7.x) has a match against local file or network observations.

Read More