elastic / elastic/protections-artifacts
Adding own rules to EPP
Open
custom
enhancement
product
- Dominant language
- YARA
- Stars
- 1.5k
- Forks
- 169
- Avg merge
- 29m
- Merged PRs (30d)
- 2
Description
## Description
The [behavior readme](https://raw.githubusercontent.com/elastic/protections-artifacts/b756a694c746e5166461c8f11408b21fec3aa68f/behavior/README.md) discloses the existence of a `endpoint_rules` python tool. I was wondering whether you are going to share this and also whether you can share how to build the protection-artifacts (s.t. they can be used by the EPP)? For instance, I'd like to build my own `production-rules-windows-v1` that is distributed with the agent.
Thanks for being so transparent and open. Much appreciated!
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.