Eric Forte 08f6a32176 [Rule Tuning] Updated ESQL Rules Based on Validation Results (#5151) ...

* Updated ESQL rules based on validation results

* Patch bump

* Updated regex patterns

* added missing azure fields to non-ecs-schema.json; adjusted okta query logic to use LIKE instead of RLIKE

* fixed incorrect field in non-ecs-schema.json; changed logs-azure.signinlogs* sightings to logs-azure.signinlogs-*

* Add and

* Additional non-ecs fields

* Add EOF

* Add kibana.alert.rule.name

* removed azure.platforlogs.identity.claim.objectid; updated query for 'c07f7898-5dc3-11f0-9f27-f661ea17fbcd'

* Field removed from query removing from keep

* Patch Bump

---------

Co-authored-by: terrancedejesus <terrance.dejesus@elastic.co>
Co-authored-by: Mika Ayenson, PhD <Mikaayenson@users.noreply.github.com>

(cherry picked from commit 7410ec7db9)

2025-09-30 04:38:50 +00:00

..

etc

[Rule Tuning] Updated ESQL Rules Based on Validation Results (#5151)

2025-09-30 04:38:50 +00:00

schemas

[Bug] Annotated Fields Ignored (#5125)

2025-09-17 21:37:13 +00:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

__main__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

action_connector.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

action.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

attack.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

beats.py

[FR] Refactor Schema Validation & Support Multi-Dataset Sequence Validation (#5059)

2025-09-10 18:13:36 +00:00

cli_utils.py

[Bug] Add Required to the Annotation (#5159)

2025-09-29 22:33:17 +00:00

config.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

custom_rules.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

custom_schemas.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

devtools.py

Added handling for unauth error (#5115)

2025-09-16 12:57:28 +00:00

docs.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

ecs.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

endgame.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

eswrap.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

exception.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

generic_loader.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

ghwrap.py

[Bug] Github Gist API Now Requires Auth (#5119)

2025-09-16 12:21:11 +00:00

integrations.py

Fix variable usage impacting schema build performance (#4910)

2025-07-15 15:52:35 +00:00

kbwrap.py

[Bug] [DAC] Custom Rules Filter Discrepancy on Stacks Upgraded to 8.18 (#4945)

2025-08-05 13:44:45 +00:00

main.py

[FR] [DAC] Add Arbitrary File location Support for Local Creation Date (#4915)

2025-07-31 18:37:17 +00:00

misc.py

fix: Better aligning prompt behaviour with jsonschema types (#4894)

2025-07-11 12:12:51 +00:00

mixins.py

[Bug] Add Required to the Annotation (#5159)

2025-09-29 22:33:17 +00:00

ml.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

navigator.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

packaging.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

remote_validation.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

rule_formatter.py

[Bug] Rule Toml Write Formatting Wrongly Formats \\\\x (#4978)

2025-08-18 21:06:40 +00:00

rule_loader.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

rule_validators.py

[FR] Refactor Schema Validation & Support Multi-Dataset Sequence Validation (#5059)

2025-09-10 18:13:36 +00:00

rule.py

[FR] Refactor Schema Validation & Support Multi-Dataset Sequence Validation (#5059)

2025-09-10 18:13:36 +00:00

utils.py

[Bug] [DAC] Custom Rules Filter Discrepancy on Stacks Upgraded to 8.18 (#4945)

2025-08-05 13:44:45 +00:00

version_lock.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00