Skip to content

Commit cede1b3

Browse files
[Security Rules] Update security rules package to v8.19.17-beta.2 (#17737)
1 parent 2ee1b9a commit cede1b3

3 files changed

Lines changed: 9 additions & 4 deletions

File tree

packages/security_detection_engine/changelog.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,10 @@
11
# newer versions go on top
22
# NOTE: please use pre-release versions (e.g. -beta.0) until a package is ready for production
3+
- version: 8.19.17-beta.2
4+
changes:
5+
- description: Release security rules update
6+
type: enhancement
7+
link: https://github.com/elastic/integrations/pull/17737
38
- version: 8.19.17-beta.1
49
changes:
510
- description: Release security rules update

packages/security_detection_engine/kibana/security_rule/e5f6a7b8-c9d0-8e1f-2a3b-4c5d6e7f8a9b_1.json renamed to packages/security_detection_engine/kibana/security_rule/e5f6a7b8-c9d0-8e1f-2a3b-4c5d6e7f8a9b_2.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
"Elastic"
55
],
66
"description": "Detects DNS queries to commonly abused remote monitoring and management (RMM) or remote access software domains from processes that are not browsers. Intended to surface RMM clients, scripts, or other non-browser activity contacting these services.",
7-
"from": "now-8d",
7+
"from": "now-9m",
88
"history_window_start": "now-7d",
99
"index": [
1010
"logs-endpoint.events.network-*",
@@ -103,8 +103,8 @@
103103
],
104104
"timestamp_override": "event.ingested",
105105
"type": "new_terms",
106-
"version": 1
106+
"version": 2
107107
},
108-
"id": "e5f6a7b8-c9d0-8e1f-2a3b-4c5d6e7f8a9b_1",
108+
"id": "e5f6a7b8-c9d0-8e1f-2a3b-4c5d6e7f8a9b_2",
109109
"type": "security-rule"
110110
}

packages/security_detection_engine/manifest.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,4 +21,4 @@ source:
2121
license: Elastic-2.0
2222
title: Prebuilt Security Detection Rules
2323
type: integration
24-
version: 8.19.17-beta.1
24+
version: 8.19.17-beta.2

0 commit comments

Comments
 (0)