elastic / elastic/detection-rules

Rule loader warnings

Open
#2,606 1 comment 0 reactions 0 assignees View on GitHub
backlog
Dominant language
Python
Stars
2.7k
Forks
696
Avg merge
4d 17h
Merged PRs (30d)
87

Description

Rather than printing them from the rule loaded within unit tests (since the global constant is set), all output should be aggregated and raised as an actual warning to control the output.

example:

```
Unusual Print Spooler Child Process
There is a new integration endpoint version 8.6.1 available! Update the rule min_stack version from 8.3.0 to 8.6.0 if using new features in this latest version.
Unusual Service Host Child Process - Childless Service
There is a new integration endpoint version 8.6.1 available! Update the rule min_stack version from 8.3.0 to 8.6.0 if using new features in this latest version.
Privileges Elevation via Parent Process PID Spoofing
There is a new integration endpoint version 8.6.1 available! Update the rule min_stack version from 8.3.0 to 8.6.0 if using new features in this latest version.
Process Created with an Elevated Token
There is a new integration endpoint version 8.6.1 available! Update the rule min_stack version from 8.4.0 to 8.6.0 if using new features in this latest version.
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.