I wonder how to handle this kind of alert. Out of documentation i shall "investigate in timeline" to see what in detail triggered the alert. Well - my timeline is empty? Also in the alert data there's no more info about the source. So what am i missing? How can i get the events that triggered thi…

Multiple Alerts in Different ATT&CK Tactics on a Single Host

Tortoise June 18, 2025, 10:56am 4

Please review below blog :

Thanks!!

Topic		Replies	Views
Dec 10th, 2018: [EN][Elastic Stack] Correlate and Alert for Security Analytics Advent Calendar elastic-stack-alerting	1	1778	December 1, 2019
Create Alert from index data Kibana elastic-stack-alerting	5	1874	August 16, 2022
Detection Alerts - Want To Only See that Alert SIEM elastic-stack-alerting	8	563	January 21, 2021
Alerting in elastic by filtering a field in it Elasticsearch	4	1040	September 12, 2019
How to create rule alert brute force Elasticsearch elastic-stack-alerting	2	1629	July 4, 2017