Mika Ayenson
6219fc06b9
* Move etc directory under detection_rules
* Prepend original `etc` path with `detection_rules`
* Update docstrings in util and CODEOWNERS
* Add resiliency to tags to account for the old directory structure
* Bug fix: remove unused param caused by commit 6ed1a39efe
Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>
44 lines
1.0 KiB
YAML
44 lines
1.0 KiB
YAML
---
|
|
package:
|
|
name: "8.3"
|
|
release: true
|
|
# exclude rules which have any of the following index <-> field pairs
|
|
# exclude_fields:
|
|
# # special field to apply to all indexes
|
|
# any:
|
|
# - process.args
|
|
# - network.direction
|
|
# logs-endpoint.events.*:
|
|
# - file.name
|
|
filter:
|
|
# ecs_version:
|
|
# - 1.4.0
|
|
# - 1.5.0
|
|
maturity:
|
|
- production
|
|
# log deprecated rules in summary and change logs
|
|
log_deprecated: true
|
|
# rule version scoping
|
|
# min_version: 1
|
|
# max_version: 5
|
|
|
|
# elastic/integrations
|
|
registry_data:
|
|
categories: ["security"]
|
|
conditions:
|
|
kibana.version: "^8.3.0"
|
|
description: Prebuilt detection rules for Elastic Security
|
|
format_version: 1.0.0
|
|
icons:
|
|
- size: 16x16
|
|
src: /img/security-logo-color-64px.svg
|
|
type: image/svg+xml
|
|
license: basic
|
|
name: security_detection_engine
|
|
owner:
|
|
github: elastic/protections
|
|
release: ga
|
|
title: Prebuilt Security Detection Rules
|
|
type: integration
|
|
version: 1.3.0-dev.0
|