Skip to content

Commit 0993ced

Browse files
shashank-elasticshashank-elastic
authored
Deprecate Cloud Defend Rules (#4537)
1 parent 290f0be commit 0993ced

18 files changed

+54
-36
lines changed

rules/integrations/cloud_defend/container_workload_protection.toml renamed to rules/_deprecated/container_workload_protection.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/04/05"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/credential_access_aws_creds_search_inside_a_container.toml renamed to rules/_deprecated/credential_access_aws_creds_search_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/06/28"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/credential_access_collection_sensitive_files_compression_inside_a_container.toml renamed to rules/_deprecated/credential_access_collection_sensitive_files_compression_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/05/12"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/credential_access_sensitive_keys_or_passwords_search_inside_a_container.toml renamed to rules/_deprecated/credential_access_sensitive_keys_or_passwords_search_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/05/12"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/defense_evasion_ld_preload_shared_object_modified_inside_a_container.toml renamed to rules/_deprecated/defense_evasion_ld_preload_shared_object_modified_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/06/06"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/discovery_suspicious_network_tool_launched_inside_a_container.toml renamed to rules/_deprecated/discovery_suspicious_network_tool_launched_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/04/26"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/execution_container_management_binary_launched_inside_a_container.toml renamed to rules/_deprecated/execution_container_management_binary_launched_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/04/26"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/execution_file_made_executable_via_chmod_inside_a_container.toml renamed to rules/_deprecated/execution_file_made_executable_via_chmod_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/04/26"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/execution_interactive_exec_to_container.toml renamed to rules/_deprecated/execution_interactive_exec_to_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/05/12"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

rules/integrations/cloud_defend/execution_interactive_shell_spawned_from_inside_a_container.toml renamed to rules/_deprecated/execution_interactive_shell_spawned_from_inside_a_container.toml

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
[metadata]
22
creation_date = "2023/04/26"
33
integration = ["cloud_defend"]
4-
maturity = "production"
5-
updated_date = "2025/02/06"
4+
deprecation_date = "2025/03/14"
5+
maturity = "deprecated"
6+
updated_date = "2025/03/14"
67

78
[rule]
89
author = ["Elastic"]

0 commit comments

Comments
 (0)