7e28b8fc50
* adding initial solution for alert suppression support in rule schema * reverting rule changes * fixing flake errors * reverting rule changes * adding unit tests * addressing flake errors * Update detection_rules/rule.py Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com> * Update detection_rules/schemas/definitions.py Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com> * adjusting rule.py after commits * adjusted test_group_field_in_schemas to check integrations * Update detection_rules/rule.py Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com> * Update detection_rules/rule.py Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com> * nested AlertSuppressDuration class under mapping class * adjusted dataclass naming * added unit test to ensure rule is KQL * fixing flake errors * added docstrings --------- Co-authored-by: Justin Ibarra <16747370+brokensound77@users.noreply.github.com>