Ross Wolf
44 lines
1.0 KiB
YAML
44 lines
1.0 KiB
YAML
---
|
|
package:
|
|
name: "7.14"
|
|
release: true
|
|
# exclude rules which have any of the following index <-> field pairs
|
|
# exclude_fields:
|
|
# # special field to apply to all indexes
|
|
# any:
|
|
# - process.args
|
|
# - network.direction
|
|
# logs-endpoint.events.*:
|
|
# - file.name
|
|
filter:
|
|
# ecs_version:
|
|
# - 1.4.0
|
|
# - 1.5.0
|
|
maturity:
|
|
- production
|
|
# log deprecated rules in summary and change logs
|
|
log_deprecated: true
|
|
# rule version scoping
|
|
# min_version: 1
|
|
# max_version: 5
|
|
|
|
# elastic/integrations
|
|
registry_data:
|
|
categories: ["security"]
|
|
conditions:
|
|
kibana_version: "^7.13.0"
|
|
description: "Prebuilt detection rules for Elastic Security"
|
|
format_version: "1.0.0"
|
|
icons:
|
|
- src: "/img/security-logo-color-64px.svg"
|
|
size: "16x16"
|
|
type: "image/svg+xml"
|
|
license: basic
|
|
name: "detection_rules"
|
|
owner:
|
|
github: elastic/protections
|
|
release: "beta"
|
|
title: "Prebuilt Security Detection Rules"
|
|
type: "integration"
|
|
version: "0.13.0"
|