[Rule Tuning] Add timeline_title to rules with timeline IDs defined (#452)

This commit is contained in:
Justin Ibarra
2020-11-03 00:12:20 +01:00
committed by GitHub
parent 9838d3d2f7
commit da64bacac1
178 changed files with 390 additions and 177 deletions
+2 -1
View File
@@ -2,7 +2,7 @@
creation_date = "2020/04/15"
ecs_version = ["1.6.0"]
maturity = "production"
updated_date = "2020/10/27"
updated_date = "2020/11/02"
[rule]
author = ["Elastic"]
@@ -20,6 +20,7 @@ rule_id = "d76b02ef-fc95-4001-9297-01cb7412232f"
severity = "high"
tags = ["Elastic", "Host", "Linux", "Threat Detection", "Execution"]
timeline_id = "76e52245-7519-4251-91ab-262fb1a1728c"
timeline_title = "Generic Process Timeline"
type = "query"
query = '''