Elastic Defend Missing File Change Record or Wrong Event Action Record

When Elastic Defend Full EDR activated, it should collect the file change events by which users, but when I try to collect event. file creation and deletion are normal and can be recorded correctly. But when file change using below command, it got problem.

1. using nano to modify existing file, no event collected.
2. using vi/vim to modify existing file, event.action shows "creation", which is wrong description.

For confirmed bugs, please report:
- Version: 8.10
- Operating System: ubuntu 20.04
- Discuss Forum URL:
- Steps to Reproduce:
1. when use "nano" command to make change of existing linux file, it does not record the event, only when nano command to create new file, the event.action with "creation" will be recorded.
3. when use "vi/vim" command, the event will be recorded, but the event.action shows "creation", which is wrong category, this will affect the security analysis.