Eric Forte

[Bug] Update Schema Prompt to include new_terms_fields

1

# Pull Request *Issue link(s)*: Resolves https://github.com/elastic/detection-rules/issues/4566 ## Summary - What I changed This PR fixes a bug where there was a missing default value if there where no new_terms...

### Describe the Bug ## Summary Creating a new terms rule via the CLI will currently not prompt the user to supply the new_terms field(s) preventing the user from being...

[FR] Handle Cases Where Kibana Duplicates Action Connectors

1

### Repository Feature Detections-as-Code (DaC) - (primarily custom rule management) ### Problem Description From one of our community members: > Object ID issues when exporting/importing between two spaces. Action connectors...

[Meta] Integration Validation Refactoring

6

## Related Issue https://github.com/elastic/detection-rules/issues/3618 This is a decoupled issue from https://github.com/elastic/detection-rules/issues/3618 to reduce the complexity of the PR review and to more atomically test the changes. Additionally this captures the...

[FR] Updates to KQL Lib Parsing

1

## Issues ## Summary This appears to be a simple bug in the parsing for KQL lib. However, prior to merging I want to more exhaustively test the implications of...

[FR] Add white space checking for KQL parse

2

## Issues https://github.com/elastic/detection-rules/issues/2700 ## Summary This addresses an issue where lark parses KQL queries without whitespace around certain tokens, where KQL does not. E.g. `"Get-NetComputerSiteName" or "Get-NetLocalGroup"` vs `"Get-NetComputerSiteName" or"Get-NetLocalGroup"`....

[FR] Add Support for Python 3.13

1

### Repository Feature Core Repo - (rule management, validation, testing, lib, cicd, etc.) ### Problem Description ## Summary Thanks @NC-Netrunner for walking through this issue with us! Currently the repo...

[Bug] Makefile test-remote-cli Defined Twice

1

# Pull Request *Issue link(s)*: https://github.com/elastic/detection-rules/issues/4750 ## Summary - What I changed Updated the Makefile to fix the duplicate entry, and fixed a minor bug in the test script which...

### Describe the Bug ## Summary Currently in the Makefile, the `test-remote-cli` command is defined twice. This causes both the test-hunting-cli and the test-remote-cli commands to run when one runs...

### Repository Feature Core Repo - (rule management, validation, testing, lib, cicd, etc.) ### Problem Description ## Summary In general, in our tooling we use direct calls to Github via...