3 Commits

Author	SHA1	Message	Date
Mika Ayenson	a52751494e	2058 add setup field to metadata (#2061) ... * Convert config header to setup in note field * Parse note field into separate setup and note field with marko gfm * only validate and parse note on elastic authored rules and add CLI description for new DR_BYPASS_NOTE_VALIDATION_AND_PARSE environment variable Co-authored-by: brokensound77 <brokensound77@users.noreply.github.com>	2022-07-18 15:41:32 -04:00
Justin Ibarra	6bdfddac8e	Expand timestamp override tests (#1907) ... * Expand timestamp_override tests * removed timestamp_override from eql sequence rules * add config entry for eql rules with beats index and t_o * add timestamp_override to missing fields	2022-04-01 15:27:08 -08:00
Samirbous	0cc0e3d31f	[New Rule] Persistence via BITS Job Notify Cmdline (#1096) ... * [New Rule] Persistence via BITS Job Notify Cmdline * changed severity and added 1 exclusion * Update rules/windows/persistence_via_bits_job_notify_command.toml Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com> Co-authored-by: Brent Murphy <56412096+bm11100@users.noreply.github.com>	2021-04-13 23:25:30 +02:00