Skip to content

Add rule docs for 8.6 rule changes#2751

Closed
terrancedejesus wants to merge 1 commit intomainfrom
rule-updates-for-8.6.0
Closed

Add rule docs for 8.6 rule changes#2751
terrancedejesus wants to merge 1 commit intomainfrom
rule-updates-for-8.6.0

Conversation

@terrancedejesus
Copy link
Contributor

Kibana Security Doc updates for rule changes in 8.6.

@terrancedejesus terrancedejesus added Team: Detections/Response Detections and Response Feature: Prebuilt rules trade-artifacts Issues related to TRADE artifact building and releasing v8.6.0 labels Nov 29, 2022
@terrancedejesus terrancedejesus self-assigned this Nov 29, 2022
@github-actions
Copy link

Documentation previews:

/html_docs

# development files
*launch.json* No newline at end of file
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Added this to ignore debugging file for Python.

significant modifications to their query or scope are listed. For detailed
information about a rule's changes, see the rule's description page.

[float]
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This should list all the files that have been changed, but does not. I will need to look into this.

GENERATED_ASCII = ROOT.joinpath('generated-ascii-files')
DEFAULT_KIBANA_RULES_DIR = str(Path().joinpath('x-pack', 'plugins', 'security_solution', 'server', 'lib',
'detection_engine', 'rules', 'prepackaged_rules'))
'detection_engine', 'prebuilt_rules', 'content', 'prepackaged_rules'))
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated this so it points to the Kibana FS rules after recent change.

Reference - elastic/kibana#142950

@terrancedejesus
Copy link
Contributor Author

terrancedejesus commented Nov 29, 2022

These security docs do not seem to be correct as a result of a failed backport in Kibana. Since our process requires us to checkout Kibana branch 8.6 and then create docs from there, changes not backported would not be reflected in doc updates.

Reference - elastic/kibana#146402 (comment)

Update

Fixes were made so the rule changes successfully backported to the 8.6 branch of Kibana and as a result, building security docs will now reflect the expected rules. For 8.6.0 rule doc updates for Kibana, please refer to the following PR which has the correct diff.

@terrancedejesus terrancedejesus deleted the rule-updates-for-8.6.0 branch September 18, 2023 22:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Feature: Prebuilt rules Team: Detections/Response Detections and Response trade-artifacts Issues related to TRADE artifact building and releasing v8.6.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant