Terrance DeJesus 73a19f8f56 [Rule Tuning] Entra ID Illicit Consent Grant via Registered Application - Fix New Terms Field (#5894) ...

* [Rule Tuning] Entra ID Illicit Consent Grant via Registered Application - Fix New Terms Field
Fixes #5893

* adding non-admin consented filter

* converting to ESQL

* additional query adjustments

* adjusted query KEEP

* updating non-ecs

* Apply suggestion from @terrancedejesus

(cherry picked from commit 48128c1c66)

2026-04-06 13:41:47 +00:00

..

etc

[Rule Tuning] Entra ID Illicit Consent Grant via Registered Application - Fix New Terms Field (#5894)

2026-04-06 13:41:47 +00:00

schemas

[Bug] CLI adds frequency field to system actions (.cases), causing import failure (#5690)

2026-02-11 20:20:08 +00:00

__init__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

__main__.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

action_connector.py

[Bug] Fix UTF-8 Encoding for Rule File Operations (#5684)

2026-02-05 13:23:03 +00:00

action.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

atlas.py

[New Rules] Add MITRE ATLAS framework support and GenAI threat detection rules (#5352)

2025-12-05 18:28:29 +00:00

attack.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

beats.py

[FR] Refactor Schema Validation & Support Multi-Dataset Sequence Validation (#5059)

2025-09-10 18:13:36 +00:00

cli_utils.py

Renovate Updates (#5258)

2025-11-17 14:54:38 +00:00

config.py

[FR] [DaC] Add fine-grained bypass env var for ES|QL keep and metadata validation (#5869)

2026-03-24 18:38:18 +00:00

custom_rules.py

[doc fix] Adjust wording in the docs for Kibana import/export commands (#5600)

2026-02-04 10:19:36 +00:00

custom_schemas.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

devtools.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 19:19:31 +00:00

docs.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

ecs.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

endgame.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

esql_errors.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 19:19:31 +00:00

esql.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 19:19:31 +00:00

eswrap.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

exception.py

[Bug] Fix UTF-8 Encoding for Rule File Operations (#5684)

2026-02-05 13:23:03 +00:00

generic_loader.py

[Bug] [DAC] Add filtering to export-rules-from-repo (#5769)

2026-03-10 17:08:46 +00:00

ghwrap.py

Renovate Updates (#5258)

2025-11-17 14:54:38 +00:00

index_mappings.py

[Bug] Add synthetic properties check to remote ESQL validation (#5308)

2025-11-13 20:27:08 +00:00

integrations.py

[Bug] Adding Deprecated Rules to Rules Package Breaks Current Package Build (#5773)

2026-02-24 18:56:51 +00:00

kbwrap.py

[Bug] [DAC] Add filtering to export-rules-from-repo (#5769)

2026-03-10 17:08:46 +00:00

main.py

[Bug] [DAC] Add filtering to export-rules-from-repo (#5769)

2026-03-10 17:08:46 +00:00

misc.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 19:19:31 +00:00

mixins.py

[Bug] Add Required to the Annotation (#5159)

2025-09-29 22:33:17 +00:00

ml.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

navigator.py

fix: type hinting fixes and additional code checks (#4790)

2025-07-01 13:25:31 +00:00

packaging.py

[FR] Includes deprecated rule stubs to the package for upstream testing (#5813)

2026-03-18 19:37:48 +00:00

remote_validation.py

feat: ESQL query validation against Elastic cluster (#4955)

2025-10-15 19:19:31 +00:00

rule_formatter.py

[Bug] Fix UTF-8 Encoding for Rule File Operations (#5684)

2026-02-05 13:23:03 +00:00

rule_loader.py

[Bug] Fix UTF-8 Encoding for Rule File Operations (#5684)

2026-02-05 13:23:03 +00:00

rule_validators.py

[Bug] ES|QL Validation Add Reverse Lookup Check Against Kibana Value (#5747)

2026-02-20 20:31:12 +00:00

rule.py

[FR] [DaC] Add fine-grained bypass env var for ES|QL keep and metadata validation (#5869)

2026-03-24 18:38:18 +00:00

utils.py

[FR] [DaC] Add fine-grained bypass env var for ES|QL keep and metadata validation (#5869)

2026-03-24 18:38:18 +00:00

version_lock.py

[FR] Includes deprecated rule stubs to the package for upstream testing (#5813)

2026-03-18 19:37:48 +00:00