Terrance DeJesus
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
---
|
|
package:
|
|
name: "8.7"
|
|
release: true
|
|
# exclude rules which have any of the following index <-> field pairs
|
|
# exclude_fields:
|
|
# # special field to apply to all indexes
|
|
# any:
|
|
# - process.args
|
|
# - network.direction
|
|
# logs-endpoint.events.*:
|
|
# - file.name
|
|
filter:
|
|
# ecs_version:
|
|
# - 1.4.0
|
|
# - 1.5.0
|
|
maturity:
|
|
- production
|
|
# log deprecated rules in summary and change logs
|
|
log_deprecated: true
|
|
# rule version scoping
|
|
# min_version: 1
|
|
# max_version: 5
|
|
|
|
# elastic/integrations
|
|
registry_data:
|
|
categories: ["security"]
|
|
conditions:
|
|
kibana.version: "^8.7.0"
|
|
description: Prebuilt detection rules for Elastic Security
|
|
format_version: 1.0.0
|
|
icons:
|
|
- size: 16x16
|
|
src: /img/security-logo-color-64px.svg
|
|
type: image/svg+xml
|
|
license: basic
|
|
name: security_detection_engine
|
|
owner:
|
|
github: elastic/protections
|
|
release: ga
|
|
title: Prebuilt Security Detection Rules
|
|
type: integration
|
|
# as of 8.4 / 1.0.3, we are transitioning from 1.x to 8.x (and 0.x to 7.x) due to changes in fleet where 0.x is a pre package
|
|
version: 8.7.0-dev.0
|