Files
sigma-rules/detection_rules/etc/stack-schema-map.yaml
T
2025-05-05 23:06:40 +05:30

135 lines
2.3 KiB
YAML

# Purpose: Alignment of stack with beats and ecs versions
# Notes
## ECS versions do not align perfectly with stack releases (as of 7.13), so this will reflect MAX ecs version for a given release
## To determine beats versions, visit https://github.com/elastic/beats/tags to determine latest version during preparation PR
## Updates:
## 7.17 was intentionally skipped because it was added late and was bug fix only
## 06/2022 - dropped backport support for 7.13.0, 7.14.0, 7.15.0 as of 8.4 branch creation
## 01/2023 - dropped backport support for 7.16.0, 8.0.0, 8.1.0, 8.2.0 - https://github.com/elastic/detection-rules/pull/2450
## Unsupported
#"7.13.0":
# # beats release about the same time as the stack, so we cannot update this until it is released
# beats: "7.13.2"
# ecs: "1.9.0"
#"7.14.0":
# beats: "7.14.0"
# ecs: "1.10.0"
#"7.15.0":
# beats: "7.15.1"
# ecs: "1.11.0"
# "7.16.0":
# beats: "7.16.2"
# ecs: "1.12.2"
# endgame: "1.9.0"
# "8.0.0":
# beats: "8.0.1"
# ecs: "8.0.1"
# endgame: "1.9.0"
# "8.1.0":
# beats: "8.1.2"
# ecs: "8.1.0"
# endgame: "1.9.0"
# "8.2.0":
# beats: "8.2.1"
# ecs: "8.2.1"
# endgame: "1.9.0"
# "8.3.0":
# beats: "8.3.3"
# ecs: "8.3.1"
# endgame: "1.9.0"
# "8.4.0":
# beats: "8.4.3"
# ecs: "8.4.0"
# endgame: "8.4.0"
# "8.5.0":
# beats: "8.5.3"
# ecs: "8.5.2"
# endgame: "8.4.0"
# "8.6.0":
# beats: "8.6.1"
# ecs: "8.6.1"
# endgame: "8.4.0"
# "8.7.0":
# beats: "8.7.0"
# ecs: "8.7.0"
# endgame: "8.4.0"
# "8.8.0":
# beats: "8.8.2"
# ecs: "8.8.0"
# endgame: "8.4.0"
# "8.9.0":
# beats: "8.9.0"
# ecs: "8.9.0"
# endgame: "8.4.0"
# "8.10.0":
# beats: "8.10.3"
# ecs: "8.10.0"
# endgame: "8.4.0"
# "8.11.0":
# beats: "8.11.2"
# ecs: "8.11.0"
# endgame: "8.4.0"
# "8.12.0":
# beats: "8.12.2"
# ecs: "8.11.0"
# endgame: "8.4.0"
# "8.13.0":
# beats: "8.13.4"
# ecs: "8.11.0"
# endgame: "8.4.0"
## Supported
"8.14.0":
beats: "8.14.3"
ecs: "8.11.0"
endgame: "8.4.0"
"8.15.0":
beats: "8.15.3"
ecs: "8.11.0"
endgame: "8.4.0"
"8.16.0":
beats: "8.16.1"
ecs: "8.16.0"
endgame: "8.4.0"
"8.17.0":
beats: "8.17.0"
ecs: "8.17.0"
endgame: "8.4.0"
"8.18.0":
beats: "8.18.0"
ecs: "8.17.0"
endgame: "8.4.0"
"9.0.0":
beats: "9.0.0"
ecs: "9.0.0"
endgame: "8.4.0"
"9.1.0":
beats: "9.0.0"
ecs: "9.0.0"
endgame: "8.4.0"