Jonhnathan 0ab70f13a4 [Rule Tuning] Add Initial SentinelOne Compatibility to Windows DRs (#3627) ...

* [Rule Tuning] Add Initial SentinelOne Compatibility

* updated definitions.py; updated tags; fixed unit tests

* added prerelease versions for s1 integration; updated build CLI commands to allow prerelease; bumped min-stacks

* updating manifests and integrations

* fixing flake errors

* min_stack

---------

Co-authored-by: Terrance DeJesus <99630311+terrancedejesus@users.noreply.github.com>
Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>
Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com>

(cherry picked from commit d023ad66b1)

2024-05-20 12:59:37 +00:00

..

etc

[Rule Tuning] Add Initial SentinelOne Compatibility to Windows DRs (#3627)

2024-05-20 12:59:37 +00:00

schemas

[Rule Tuning] Add Initial SentinelOne Compatibility to Windows DRs (#3627)

2024-05-20 12:59:37 +00:00

__init__.py

[FR] Independently package kql / kibana and bump to py3.12 (#3514)

2024-03-15 01:26:12 +00:00

__main__.py

[FR] Independently package kql / kibana and bump to py3.12 (#3514)

2024-03-15 01:26:12 +00:00

attack.py

[FR] Adapt PyPi semver Library and Remove Custom (#2503)

2023-02-07 14:26:29 -05:00

beats.py

[Bug] Use integration schemas for required_field types (#3303)

2023-12-11 17:37:43 +00:00

cli_utils.py

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 20:27:01 +00:00

devtools.py

[Rule Tuning] Add Initial SentinelOne Compatibility to Windows DRs (#3627)

2024-05-20 12:59:37 +00:00

docs.py

[Bug] Fix URL links in autogenerated security docs (#3474)

2024-02-23 21:55:30 +00:00

ecs.py

[FR] Add Support for Multi-Fields and Validation in Rules (#2882)

2023-06-28 20:35:33 -04:00

endgame.py

add support for additional endgame field types (#2372)

2022-10-19 11:11:09 -04:00

eswrap.py

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 20:27:01 +00:00

ghwrap.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

integrations.py

[Rule Tuning] Add Initial SentinelOne Compatibility to Windows DRs (#3627)

2024-05-20 12:59:37 +00:00

kbwrap.py

Refresh Kibana module with API updates (#3466)

2024-04-26 17:20:37 +00:00

main.py

Refresh Kibana module with API updates (#3466)

2024-04-26 17:20:37 +00:00

mappings.py

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 20:27:01 +00:00

misc.py

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 20:27:01 +00:00

mixins.py

Refresh Kibana module with API updates (#3466)

2024-04-26 17:20:37 +00:00

ml.py

Refactor experimental ML CLI and code (#1218)

2021-06-02 20:37:12 -08:00

navigator.py

[Bug] Fix missing indexes on navigator build (#3636)

2024-05-01 21:58:13 +00:00

packaging.py

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 20:27:01 +00:00

remote_validation.py

[FR] Add Support for ES|QL Rule Type and Remote Validation (#3281)

2023-12-08 19:52:16 +00:00

rule_formatter.py

[Bug] Update Rule Formatter (#3668)

2024-05-13 19:07:19 +00:00

rule_loader.py

Refresh Kibana module with API updates (#3466)

2024-04-26 17:20:37 +00:00

rule_validators.py

[Bug] Query validation failing to capture InSet edge case with ip field types (#3572)

2024-05-06 12:07:00 +00:00

rule.py

[New Rule] AWS S3 Bucket Enumeration or Brute Force (#3635)

2024-05-01 21:08:19 +00:00

utils.py

Refresh Kibana module with API updates (#3466)

2024-04-26 17:20:37 +00:00

version_lock.py

[Bug][FR] Remove Rule Type Change Restriction and Fix Version Lock Bug (#2769)

2023-05-02 11:00:36 -04:00