Revert elastic#1440 new endpoint promotion rule (elastic#1470)

* Revert elastic#1440 new endpoint promotion rule * Set the updated_at date
joepeeples · Sep 3, 2021 · c9d6527 · c9d6527
1 parent 7710e2b
commit c9d6527
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 72 deletions.
diff --git a/rules/integrations/endpoint/elastic_endpoint_security.toml b/rules/integrations/endpoint/elastic_endpoint_security.toml
@@ -1,8 +1,7 @@
 [metadata]
 creation_date = "2020/07/08"
 maturity = "production"
-updated_date = "2021/08/25"
-integration = "endpoint"
+updated_date = "2021/09/03"
 
 [rule]
 author = ["Elastic"]
@@ -26,7 +25,7 @@ timestamp_override = "event.ingested"
 type = "query"
 
 query = '''
-event.kind:alert and event.module:(endpoint and not endgame) and not event.code: behavior
+event.kind:alert and event.module:(endpoint and not endgame)
 '''
 
 

diff --git a/rules/integrations/endpoint/elastic_endpoint_security_behavior_protection.toml b/rules/integrations/endpoint/elastic_endpoint_security_behavior_protection.toml