Back-porting Version Trimming (#3704)

rules/integrations/github/impact_github_repository_deleted.toml

@@ -2,19 +2,15 @@
 creation_date = "2023/08/29"
 integration = ["github"]
 maturity = "production"
-min_stack_comments = "New fields added: required_fields, related_integrations, setup"
-min_stack_version = "8.3.0"
-updated_date = "2023/12/14"
+updated_date = "2024/05/21"
 
 [rule]
 author = ["Elastic"]
 description = """
-This rule detects when a GitHub repository is deleted within your organization. 
-Repositories are a critical component used within an organization to manage work, 
-collaborate with others and release products to the public. Any delete action against 
-a repository should be investigated to determine it's validity. Unauthorized deletion 
-of organization repositories could cause irreversible loss of intellectual property and 
-indicate compromise within your organization.
+This rule detects when a GitHub repository is deleted within your organization. Repositories are a critical component
+used within an organization to manage work, collaborate with others and release products to the public. Any delete
+action against a repository should be investigated to determine it's validity. Unauthorized deletion of organization
+repositories could cause irreversible loss of intellectual property and indicate compromise within your organization.
 """
 from = "now-9m"
 index = ["logs-github.audit-*"]
@@ -24,18 +20,21 @@ name = "GitHub Repository Deleted"
 risk_score = 47
 rule_id = "345889c4-23a8-4bc0-b7ca-756bd17ce83b"
 severity = "medium"
-tags = ["Domain: Cloud", 
-        "Use Case: Threat Detection", 
-        "Use Case: UEBA",        
-        "Tactic: Impact", 
-        "Data Source: Github"
-        ]
+tags = [
+    "Domain: Cloud",
+    "Use Case: Threat Detection",
+    "Use Case: UEBA",
+    "Tactic: Impact",
+    "Data Source: Github",
+]
 timestamp_override = "event.ingested"
 type = "eql"
+
 query = '''
 configuration where event.module == "github" and event.action == "repo.destroy"
 '''
 
+
 [[rule.threat]]
 framework = "MITRE ATT&CK"
 [[rule.threat.technique]]
@@ -44,8 +43,8 @@ name = "Data Destruction"
 reference = "https://attack.mitre.org/techniques/T1485/"
 
 
-
 [rule.threat.tactic]
 id = "TA0040"
 name = "Impact"
 reference = "https://attack.mitre.org/tactics/TA0040/"
+