Jonhnathan 8bab0df7bf [Rule Tuning] Add Initial Microsoft Defender for Endpoint Compatibility to Windows DRs (#3825) ...

* [Rule Tuning] Add Initial Microsoft Defender for Endpoint Compatibility to Windows DRs

* .

* Update integration-schemas.json.gz

* Fix integration manifests

Removed changes from:
- rules/windows/collection_email_powershell_exchange_mailbox.toml
- rules/windows/command_and_control_rdp_tunnel_plink.toml
- rules/windows/command_and_control_screenconnect_childproc.toml
- rules/windows/credential_access_domain_backup_dpapi_private_keys.toml
- rules/windows/credential_access_kirbi_file.toml
- rules/windows/defense_evasion_amsi_bypass_dllhijack.toml
- rules/windows/defense_evasion_persistence_account_tokenfilterpolicy.toml
- rules/windows/defense_evasion_suspicious_zoom_child_process.toml
- rules/windows/execution_command_shell_started_by_unusual_process.toml
- rules/windows/initial_access_suspicious_ms_outlook_child_process.toml
- rules/windows/persistence_adobe_hijack_persistence.toml
- rules/windows/persistence_appcertdlls_registry.toml
- rules/windows/persistence_system_shells_via_services.toml

(selectively cherry picked from commit 54d5b442cf)

2024-06-26 14:09:43 +00:00

..

etc

[Rule Tuning] Add Initial Microsoft Defender for Endpoint Compatibility to Windows DRs (#3825)

2024-06-26 14:09:43 +00:00

schemas

[Rule Tuning] Add Initial Microsoft Defender for Endpoint Compatibility to Windows DRs (#3825)

2024-06-26 14:09:43 +00:00

__init__.py

[FR] Independently package kql / kibana and bump to py3.12 (#3514)

2024-03-15 01:26:12 +00:00

__main__.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

attack.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

beats.py

[Bug] Use integration schemas for required_field types (#3303)

2023-12-11 17:37:43 +00:00

cli_utils.py

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 20:27:01 +00:00

devtools.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

docs.py

[Bug] Fix URL links in autogenerated security docs (#3474)

2024-02-23 21:55:30 +00:00

ecs.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

endgame.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

eswrap.py

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 20:27:01 +00:00

ghwrap.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

integrations.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

kbwrap.py

Refresh Kibana module with API updates (#3466)

2024-04-26 17:20:37 +00:00

main.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

mappings.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

misc.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

mixins.py

Refresh Kibana module with API updates (#3466)

2024-04-26 17:20:37 +00:00

ml.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

navigator.py

[Bug] Fix missing indexes on navigator build (#3636)

2024-05-01 21:58:13 +00:00

packaging.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

remote_validation.py

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 19:52:16 +00:00

rule_formatter.py

[Bug] Update Rule Formatter (#3668)

2024-05-13 19:07:19 +00:00

rule_loader.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

rule_validators.py

[Bug] Query validation failing to capture InSet edge case with ip field types (#3572)

2024-05-06 12:07:00 +00:00

rule.py

[FR] Loosen Filters Schema Validation (#3753)

2024-06-18 21:00:33 +00:00

utils.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00

version_lock.py

[FR] Update utility path computation to use pathlib (#3699)

2024-05-23 21:39:55 +00:00