[metadata] name = detection_rules license = Elastic License v2 license_file = LICENSE.txt