From e5ee8e024ffbed459e88b9b1ae19aba6c7361d79 Mon Sep 17 00:00:00 2001 From: Samirbous <64742097+Samirbous@users.noreply.github.com> Date: Tue, 2 Aug 2022 17:57:28 +0200 Subject: [PATCH] [Deprecate Rule] File and Directory Discovery (#2217) * [Deprecate Rule] File and Directory Discovery very noisy and most if not all are FPs, few rooms for tuning without rendering the rule easy to bypass. * Delete workspace.xml --- .../discovery_file_dir_discovery.toml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) rename rules/{windows => _deprecated}/discovery_file_dir_discovery.toml (97%) diff --git a/rules/windows/discovery_file_dir_discovery.toml b/rules/_deprecated/discovery_file_dir_discovery.toml similarity index 97% rename from rules/windows/discovery_file_dir_discovery.toml rename to rules/_deprecated/discovery_file_dir_discovery.toml index e66f9a343..18c76568c 100644 --- a/rules/windows/discovery_file_dir_discovery.toml +++ b/rules/_deprecated/discovery_file_dir_discovery.toml @@ -1,7 +1,8 @@ [metadata] creation_date = "2020/12/04" -maturity = "production" -updated_date = "2022/04/21" +deprecation_date = "2022/08/02" +maturity = "deprecated" +updated_date = "2022/08/02" [rule] author = ["Elastic"]