[Security Solution][Detection Rules] Makes threat techniques optional#85481
[Security Solution][Detection Rules] Makes threat techniques optional#85481dplumlee merged 3 commits intoelastic:masterfrom
Conversation
|
@elasticmachine merge upstream |
e67273a to
d48c696
Compare
|
@dplumlee Should these types also be updated to reflect that Also is there a way to combine those types with the ones defined here? Or is there a reason they need to be duplicated? |
|
@peluja1012 there's no reason they need to be duplicated, I'll consolidate them. As for the |
💚 Build SucceededMetrics [docs]Async chunks
Distributable file count
Page load bundle
History
To update your PR or re-run it, just comment with: |
peluja1012
left a comment
There was a problem hiding this comment.
LGTM. Works well and I'm now able to create a rule with only a "tactic" and no "technique". Thanks for consolidating the types here, also.
Summary
Removes the validation and requirement to have at least one technique per tactic in the rule's
threatfield, giving users the ability to map to any level they desire (tactic, technique, subtechnique) for threats in the rule creation UI.Screenshots
Before
After
Checklist
Delete any items that are not applicable to this PR.
For maintainers