Eric Forte 26d37dd62e [Bug] Ignore Other Keep Wildcards (#5792) ...

* Ignore other Keep Wildcards

* Added a unit test for multiple keeps

* Add keep star unit tests

2026-03-09 19:33:27 -04:00

..

data

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 12:46:28 -07:00

kuery

[FR] Add white space checking for KQL parse (#3789)

2025-07-31 14:23:53 -04:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

base.py

[FR] Expand CUSTOM_RULES_DIR to support user relative paths (#5390)

2025-12-03 12:19:29 -05:00

test_all_rules.py

[FR] Minor Typo Fixes (#5784)

2026-03-06 16:12:45 -06:00

test_gh_workflows.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_hunt_data.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_packages.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_python_library.py

[Bug] Add unit tests and fix Alert Suppression schema validation for ThresholdQueryRuleData (#5196)

2025-10-09 16:21:21 -04:00

test_rules_remote.py

[Bug] Ignore Other Keep Wildcards (#5792)

2026-03-09 19:33:27 -04:00

test_schemas.py

[FR] Add keep metadata check to esql schema test (#5441)

2026-01-14 16:03:24 -05:00

test_specific_rules.py

[Rule Tuning] Remove host.os.type Unit Test Exception (#5317)

2025-11-14 08:46:24 -08:00

test_toml_formatter.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_transform_fields.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_utils.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

test_version_locking.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00