Commit Graph

9 Commits

Author SHA1 Message Date
Colson Wilhoit d0134efec6 Prep for creation of 8.2 branch (#1762)
Removed changes from:
- etc/packages.yml

(selectively cherry picked from commit e0dda91f26)
2022-02-09 03:45:54 +00:00
Justin Ibarra 59b6d6dd08 Prepare for creation of 8.1 branch (#1700)
Removed changes from:
- etc/packages.yml

(selectively cherry picked from commit 2e78da5c9a)
2022-01-26 03:14:04 +00:00
Justin Ibarra d0ec0f0297 Prepare for creation of 7.16 release branch (#1611)
Removed changes from:
- etc/packages.yml

(selectively cherry picked from commit 95d7e9b6f5)
2021-11-15 18:41:47 +00:00
Justin Ibarra c8cf88cd62 Refresh ECS (1.12.1) and beats (7.15.1) schemas (#1584)
* Refresh ECS (1.12.1) and beats (7.15.1) schemas

* update ecs to 1.10 for 7.14 stack validation

* add note with reference url
2021-10-28 11:24:28 -05:00
Ross Wolf 7b8b18cb20 Update main to point to 7.16 (#1457)
* Update main to point to 7.16
* Add 7.16 -> 7.15 migration
* Update stack-schema-map
* Update conditions.kibana.version
2021-08-26 14:23:55 -06:00
Justin Ibarra 2d517432e3 Bump package versions (#1418)
* Bump package versions
* Add 7.14 migration; use master schema map if one does not exist
* add test to ensure an entry exists in the stack-schema-map for the current package version

Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2021-08-18 21:25:53 -08:00
Justin Ibarra b27a20fc3a Pull latest ECS+beats schemas and update schema-map (#1417) 2021-08-12 13:08:12 -08:00
Justin Ibarra 163d9e3864 Update cardinality field in schema for threshold rules (#1349)
* Make cardinality array in schema for threshold rules
* update master, 7.12, 7.13, and 7.14 schemas with cardinality fix
* fix 7.12 downgrade to handle cardinality as an array

* Add two new rules to detect agent spoofing


Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2021-07-21 08:32:54 -08:00
Justin Ibarra 781953a0a0 Add min_stack_version to rule metadata (#1173)
* Add min_stack_version to metadata of rule structure
* validate all "stack versions" between defined and current package
* Use master schemas if min_stack_version > current_package

Co-authored-by: Ross Wolf <31489089+rw-access@users.noreply.github.com>
2021-06-30 13:26:27 -08:00