The purpose of this PR is to restrict the pipeline to the existing backend, specifically microsoft365defender, rather than supporting all backends available in Sigma. To achieve this, the backend identifier is set to microsoft365defender, and the allowed_backends property is configured accordingly.
The purpose of this PR is to restrict the pipeline to the existing backend, specifically
microsoft365defender, rather than supporting all backends available in Sigma. To achieve this, the backend identifier is set tomicrosoft365defender, and theallowed_backendsproperty is configured accordingly.