security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[Rule Tuning] Kubernetes - update min_stack for new rules (#2310)

Browse Source 
## Link to rule
https://github.com/elastic/detection-rules/blob/main/rules/integrations/kubernetes/discovery_denied_service_account_request.toml
https://github.com/elastic/detection-rules/blob/main/rules/integrations/kubernetes/initial_access_anonymous_request_authorized.toml
https://github.com/elastic/detection-rules/blob/main/rules/integrations/kubernetes/privilege_escalation_suspicious_assignment_of_controller_service_account.toml

## Description
<!-- Provide a detailed description of the suggested changes -->
min_stack change to 8.4 with new required fields added to Kubernetes Integration
This commit is contained in:
Isai
2022-09-20 17:09:22 -04:00
committed by GitHub
parent 3c97d34615
commit 5b8593559c
3 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/kubernetes/discovery_denied_service_account_request.toml
+3 -3
View File
@@ -2,9 +2,9 @@
creation_date = "2022/09/13"
integration = "kubernetes"
maturity = "production"
min_stack_comments = "New fields added: required_fields, related_integrations, setup"
min_stack_version = "8.3.0"
updated_date = "2022/09/15"
min_stack_comments = "New fields added to Kubernetes Integration"
min_stack_version = "8.4.0"
updated_date = "2022/09/20"
[rule]
author = ["Elastic"]
rules/integrations/kubernetes/initial_access_anonymous_request_authorized.toml
+3 -3
View File
@@ -2,9 +2,9 @@
creation_date = "2022/09/13"
integration = "kubernetes"
maturity = "production"
min_stack_comments = "New fields added: required_fields, related_integrations, setup"
min_stack_version = "8.3.0"
updated_date = "2022/09/13"
min_stack_comments = "New fields added to Kubernetes Integration"
min_stack_version = "8.4.0"
updated_date = "2022/09/20"
[rule]
author = ["Elastic"]
rules/integrations/kubernetes/privilege_escalation_suspicious_assignment_of_controller_service_account.toml
+3 -3
View File
@@ -2,9 +2,9 @@
creation_date = "2022/09/13"
integration = "kubernetes"
maturity = "production"
min_stack_comments = "New fields added: required_fields, related_integrations, setup"
min_stack_version = "8.3.0"
updated_date = "2022/09/15"
min_stack_comments = "New fields added to Kubernetes Integration"
min_stack_version = "8.4.0"
updated_date = "2022/09/20"
[rule]
author = ["Elastic"]