From f656c7bc252f2d6ee60c4f52e5544b6897722325 Mon Sep 17 00:00:00 2001 From: Adrian Serrano Date: Wed, 3 Nov 2021 17:01:25 +0100 Subject: [PATCH] Fix Windows path causing emoji to be rendered in Kibana (#1585) In impact_hosts_file_modified rule, the `note` field contains a Windows path that causes a confused-face-emoji to be rendered in the Investigation Guide tab. Surrounding the path in backticks fixes it. (cherry picked from commit aa219710a1355fdfc929af30fa9832827d83f231) --- rules/cross-platform/impact_hosts_file_modified.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rules/cross-platform/impact_hosts_file_modified.toml b/rules/cross-platform/impact_hosts_file_modified.toml index 70b098752..0cb021c41 100644 --- a/rules/cross-platform/impact_hosts_file_modified.toml +++ b/rules/cross-platform/impact_hosts_file_modified.toml @@ -18,7 +18,7 @@ license = "Elastic License v2" name = "Hosts File Modified" note = """## Config -For Windows systems using Auditbeat, this rule requires adding 'C:/Windows/System32/drivers/etc' as an additional path in the 'file_integrity' module of auditbeat.yml.""" +For Windows systems using Auditbeat, this rule requires adding `C:/Windows/System32/drivers/etc` as an additional path in the 'file_integrity' module of auditbeat.yml.""" references = ["https://www.elastic.co/guide/en/beats/auditbeat/current/auditbeat-reference-yml.html"] risk_score = 47 rule_id = "9c260313-c811-4ec8-ab89-8f6530e0246c"