With an increase in planned threat intel related packages, both new and converted from filebeat modules, I think at some point in the near future we would need a dedicated category for this.
With category I am talking about this specific list here:
https://github.com/elastic/package-spec/blob/master/versions/1/manifest.spec.yml#L14
From my understanding this is also impacting the integration overview page, and maybe how the fleet UI handles it?
Implementation
With an increase in planned threat intel related packages, both new and converted from filebeat modules, I think at some point in the near future we would need a dedicated category for this.
With category I am talking about this specific list here:
https://github.com/elastic/package-spec/blob/master/versions/1/manifest.spec.yml#L14
From my understanding this is also impacting the integration overview page, and maybe how the fleet UI handles it?
Implementation