elastic / detection-rules

https://www.elastic.co/guide/en/security/current/detection-engine-overview.html
Other
1.92k stars 492 forks source link

[Bug] Broken Links in ATT&CK-coverage.md #4007

Closed shashank-elastic closed 2 weeks ago

shashank-elastic commented 1 month ago

Describe the Bug

The AWS wildcard Link in ATT&CK-coverage.md is broken, It is because all of the rules using it either updated the index to be more specific or are deprecated and the update logic does not remove any links for such a scenario in ATT&CK-coverage.md.

To Reproduce

  1. Go to https://github.com/elastic/detection-rules/blob/main/docs/ATT&CK-coverage.md
  2. Click on Link Elastic-detection-rules-indexes-logs-awsWILDCARD
  3. See the error
image

Expected Behavior

If there are no rules pointing to the index and the GIST is not updated, the Link in ATT&CK-coverage.md should be removed.

Lets look at the solution of always updating the ATT&CK-coverage.md file with the latest information.

Screenshots

NA

Desktop - OS

None

Desktop - Version

NA

Additional Context

No response