From 814130bf347fad7a0ee8f88dc1de580d53ad960b Mon Sep 17 00:00:00 2001 From: shashank-elastic <91139415+shashank-elastic@users.noreply.github.com> Date: Mon, 16 Sep 2024 20:12:09 +0530 Subject: [PATCH] min_stack New Rules that use the S1 Integration (#4081) --- rules/windows/defense_evasion_script_via_html_app.toml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/rules/windows/defense_evasion_script_via_html_app.toml b/rules/windows/defense_evasion_script_via_html_app.toml index 7236f2134..bd98fc0f2 100644 --- a/rules/windows/defense_evasion_script_via_html_app.toml +++ b/rules/windows/defense_evasion_script_via_html_app.toml @@ -2,7 +2,9 @@ creation_date = "2020/09/09" integration = ["windows", "system", "sentinel_one_cloud_funnel", "m365_defender"] maturity = "production" -updated_date = "2024/09/09" +min_stack_comments = "Breaking change at 8.13.0 for SentinelOne Integration." +min_stack_version = "8.13.0" +updated_date = "2024/09/16" [rule] author = ["Elastic"]