Ruben Groenewoud cb65831518 [Rule Tuning] Adding D4C Compatibility to Compatible K8s-related Rules (#5578) ...

* [Rule Tuning] Adding D4C Compatibility to Compatible K8s-related Rules

* Update manifests & schemas

* [New/Updated] Migrated `process.command_line` --> `process.args` for Compatibility

* Pyproject.toml Patch

* ++

(cherry picked from commit c608b673bf)

2026-01-26 12:31:09 +00:00

..

etc

[Rule Tuning] Adding D4C Compatibility to Compatible K8s-related Rules (#5578)

2026-01-26 12:31:09 +00:00

schemas

Prep for Release 9.3 (#5548)

2026-01-12 15:40:35 +00:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

__main__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

action_connector.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

action.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

atlas.py

[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules (#5352)

2025-12-05 18:31:02 +00:00

attack.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

beats.py

[FR] Refactor Schema Validation & Support Multi-Dataset Sequence Validation (#5059)

2025-09-10 13:11:04 -05:00

cli_utils.py

Renovate Updates (#5258)

2025-11-17 14:57:54 +00:00

config.py

[FR] Expand CUSTOM_RULES_DIR to support user relative paths (#5390)

2025-12-03 17:23:16 +00:00

custom_rules.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

custom_schemas.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

devtools.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

docs.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

ecs.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

endgame.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

esql_errors.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

esql.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

eswrap.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

exception.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

generic_loader.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

ghwrap.py

Renovate Updates (#5258)

2025-11-17 14:57:54 +00:00

index_mappings.py

[Bug] Add synthetic properties check to remote ESQL validation (#5308)

2025-11-13 20:29:28 +00:00

integrations.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

kbwrap.py

[Bug] [DAC] Custom Rules Filter Discrepancy on Stacks Upgraded to 8.18 (#4945)

2025-08-05 09:42:25 -04:00

main.py

Added logic to main.py to use the created_at and updated_at values if they exist (#5444)

2026-01-26 10:03:53 +00:00

misc.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

mixins.py

[Bug] Add Required to the Annotation (#5159)

2025-09-29 18:30:50 -04:00

ml.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

navigator.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

packaging.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

remote_validation.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

rule_formatter.py

[fix] Preserve actions[].params.message field formatting during rule export from the repo (#5597)

2026-01-26 12:07:47 +00:00

rule_loader.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00

rule_validators.py

[Bug] [DAC] Auto Gen Schema Fails on Certain Subqueries (#5256)

2025-11-12 16:26:22 +00:00

rule.py

[FR] Add keep metadata check to esql schema test (#5441)

2026-01-14 21:06:56 +00:00

utils.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 15:17:07 -04:00

version_lock.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 08:20:55 -05:00