From 9c9d0459ba087213bb76202c1f5a67c7c1cf2e55 Mon Sep 17 00:00:00 2001
From: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Date: Wed, 20 Dec 2023 08:49:45 -0500
Subject: [PATCH] deprecating 'Malicious Remote File Creation' (#3342)

(cherry picked from commit 7e85854e7b4a29dc7d462df4099b964781ec405d)
---
 .../lateral_movement_malicious_remote_file_creation.toml   | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)
 rename rules/{cross-platform => _deprecated}/lateral_movement_malicious_remote_file_creation.toml (89%)

diff --git a/rules/cross-platform/lateral_movement_malicious_remote_file_creation.toml b/rules/_deprecated/lateral_movement_malicious_remote_file_creation.toml
similarity index 89%
rename from rules/cross-platform/lateral_movement_malicious_remote_file_creation.toml
rename to rules/_deprecated/lateral_movement_malicious_remote_file_creation.toml
index 0ff8be9bd..93c1092b5 100644
--- a/rules/cross-platform/lateral_movement_malicious_remote_file_creation.toml
+++ b/rules/_deprecated/lateral_movement_malicious_remote_file_creation.toml
@@ -1,10 +1,11 @@
 [metadata]
 creation_date = "2023/10/12"
+deprecation_date = "2023/12/14"
 integration = ["endpoint"]
-maturity = "production"
-min_stack_comments = "Avoding rule duplication for <= 8.8 stack versions"
+maturity = "deprecated"
+min_stack_comments = "Avoiding rule duplication for <= 8.8 stack versions"
 min_stack_version = "8.9.0"
-updated_date = "2023/10/12"
+updated_date = "2023/12/14"
 
 [rule]
 author = ["Elastic"]