search

elastic / detection-rules

https://www.elastic.co/guide/en/security/current/detection-engine-overview.html
Other
1.86k stars 467 forks source link

[FR][DAC] Add validation on exceptions values #3623

Open brokensound77 opened 2 months ago

brokensound77 commented 2 months ago

Note: this work will target the DAC-feature branch

related to #3407

This is a consideration and not a commitment to work at this point. We should review the feasibility and supportability. If it is doable and not deemed maintainable, we can move the example code to the DAC reference for users to manually implement.

Look into adding validation on exceptions data using the same schema the rule logic is validated against.

eric-forte-elastic commented 1 month ago

I think it makes more sense to implement this after we refactor schema validation.

brokensound77 commented 1 month ago

so most likely after merging DAC-feature to main? SGTM 👍