elastic
Adding own rules to EPP
Description
The behavior readme discloses the existence of a endpoint_rules python tool. I was wondering whether you are going to share this and also whether you can share how to build the protection-artifacts (s.t. they can be used by the EPP)? For instance, I'd like to build my own production-rules-windows-v1 that is distributed with the agent.
Thanks for being so transparent and open. Much appreciated!
Hey @Liblor! We love the idea but it's not something we support at this time. With that said, our product teams are tracking similar feature request to be able to build/add your own artifacts to the agent. Everyone has a vote and so we are tracking all request to inform how we prioritize.
