[Security Solution] Rule view duplication on MITRE coverage page

[approksiu]

Describe the bug:
Rule is duplicated in the mitre att&ck page cell

Kibana/Elasticsearch Stack version:
8.10.2, 8.10.3

Server OS version:

Browser and Browser OS versions:

Elastic Endpoint version:

Original install method (e.g. download page, yum, from source, etc.):

Functional Area (e.g. Endpoint management, timelines, resolver, etc.):

Steps to reproduce:

1. Install all rules, enable them
2. Go to MITRE ATT&CK page
3. Search for T1546.015 (as an example)
4. Scroll down to the cell with the rules
5. Click on the cell to see the list of rules

Current behavior:
The rule is shown twice for coverage.

Expected behavior:
Rule should be shown once.

Screenshots (if relevant):

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context (logs, chat logs, magical formulas, etc.):

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[banderror]

@vgomez-el Fixed by #169708 and should be available in the last 8.11.0 BC.

[vgomez-el]

@banderror after double checking it with @approksiu we can say that the bug is not fixed on the last 8.11 BC available con cloud.

[banderror]

@vgomez-el Thanks for checking. Yes, because #169708 (comment). The fix will be available in 8.11.1 and the first BC for this patch release.

[banderror]

Hey @vgomez-el, after chatting with @MadameSheema, I'd like to close this ticket.

We have very limited resources on the QA side, and it turns out (I didn't know) that by default we only have you and Tanisha dedicated to D&R teams, but not QASource. I think focusing on regression testing of 8.12 would be much more important now compared to verifying this bugfix. Also, I have good confidence in the bugfix, because it has been tested by two engineers during the code review + we have automated test coverage which is almost done for this feature (#168058).

Please feel free to reopen if/once you'd like to check the fix.

[ghost]

hi @approksiu

we have validated this issue on 8.11.2 and single entry for component model object hijack is showing now ✔️

Build details:

Version: 8.11.2
Commit: 92746356b61c3e3ac62b6d7045727f8d737fa4b5
Build:68299

Screen-Shot

Hence we are adding "QA:Validated" tag to it.

thanks !!