removing min-stack requirements

terrancedejesus · terrancedejesus · commit 972c77574bcb · 2024-11-08T12:39:52.000-05:00
diff --git a/rules/cross-platform/execution_aws_ssm_sendcommand_with_command_parameters.toml b/rules/cross-platform/execution_aws_ssm_sendcommand_with_command_parameters.toml
@@ -3,8 +3,6 @@ creation_date = "2022/09/03"
 integration = ["endpoint", "auditd_manager"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/defense_evasion_cloudtrail_logging_deleted.toml b/rules/integrations/aws/defense_evasion_cloudtrail_logging_deleted.toml
@@ -3,8 +3,6 @@ creation_date = "2020/05/26"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/discovery_ec2_multi_region_describe_instances.toml b/rules/integrations/aws/discovery_ec2_multi_region_describe_instances.toml
@@ -3,8 +3,6 @@ creation_date = "2024/08/26"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/discovery_new_terms_sts_getcalleridentity.toml b/rules/integrations/aws/discovery_new_terms_sts_getcalleridentity.toml
@@ -3,8 +3,6 @@ creation_date = "2024/05/24"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/execution_ssm_command_document_created_by_rare_user.toml b/rules/integrations/aws/execution_ssm_command_document_created_by_rare_user.toml
@@ -3,8 +3,6 @@ creation_date = "2024/11/01"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/exfiltration_sns_email_subscription_by_rare_user.toml b/rules/integrations/aws/exfiltration_sns_email_subscription_by_rare_user.toml
@@ -3,8 +3,6 @@ creation_date = "2024/11/01"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/persistence_ec2_security_group_configuration_change_detection.toml b/rules/integrations/aws/persistence_ec2_security_group_configuration_change_detection.toml
@@ -3,8 +3,6 @@ creation_date = "2021/05/05"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic", "Austin Songer"]
diff --git a/rules/integrations/aws/persistence_iam_create_user_via_assumed_role_on_ec2_instance.toml b/rules/integrations/aws/persistence_iam_create_user_via_assumed_role_on_ec2_instance.toml
@@ -3,8 +3,6 @@ creation_date = "2024/11/04"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml b/rules/integrations/aws/privilege_escalation_iam_customer_managed_policy_attached_to_role.toml
@@ -3,8 +3,6 @@ creation_date = "2024/11/04"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules/integrations/aws/privilege_escalation_role_assumption_by_service.toml b/rules/integrations/aws/privilege_escalation_role_assumption_by_service.toml
@@ -3,8 +3,6 @@ creation_date = "2021/05/17"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic", "Austin Songer"]
diff --git a/rules/integrations/aws/privilege_escalation_role_assumption_by_user.toml b/rules/integrations/aws/privilege_escalation_role_assumption_by_user.toml
@@ -3,8 +3,6 @@ creation_date = "2024/11/05"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
diff --git a/rules_building_block/persistence_iam_instance_request_to_iam_service.toml b/rules_building_block/persistence_iam_instance_request_to_iam_service.toml
@@ -4,8 +4,6 @@ creation_date = "2024/07/24"
 integration = ["aws"]
 maturity = "production"
 updated_date = "2024/11/07"
-min_stack_comments = "New fields added: investigation_fields"
-min_stack_version = "8.11.0"
 
 [rule]
 author = ["Elastic"]
