diff --git a/rules/integrations/o365/collection_microsoft_365_new_inbox_rule.toml b/rules/integrations/o365/collection_microsoft_365_new_inbox_rule.toml index bae3ada0352..332e71150a4 100644 --- a/rules/integrations/o365/collection_microsoft_365_new_inbox_rule.toml +++ b/rules/integrations/o365/collection_microsoft_365_new_inbox_rule.toml @@ -2,9 +2,9 @@ creation_date = "2021/03/29" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic", "Gary Blackwell", "Austin Songer"] diff --git a/rules/integrations/o365/credential_access_microsoft_365_brute_force_user_account_attempt.toml b/rules/integrations/o365/credential_access_microsoft_365_brute_force_user_account_attempt.toml index af19258bd65..862240ebb40 100644 --- a/rules/integrations/o365/credential_access_microsoft_365_brute_force_user_account_attempt.toml +++ b/rules/integrations/o365/credential_access_microsoft_365_brute_force_user_account_attempt.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/30" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2024/01/17" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic", "Willem D'Haese", "Austin Songer"] diff --git a/rules/integrations/o365/credential_access_microsoft_365_potential_password_spraying_attack.toml b/rules/integrations/o365/credential_access_microsoft_365_potential_password_spraying_attack.toml index cca4ae142b2..b709ca3dec9 100644 --- a/rules/integrations/o365/credential_access_microsoft_365_potential_password_spraying_attack.toml +++ b/rules/integrations/o365/credential_access_microsoft_365_potential_password_spraying_attack.toml @@ -2,9 +2,9 @@ creation_date = "2020/12/01" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2024/01/05" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/credential_access_user_excessive_sso_logon_errors.toml b/rules/integrations/o365/credential_access_user_excessive_sso_logon_errors.toml index 58de8ee114c..58d24cb0497 100644 --- a/rules/integrations/o365/credential_access_user_excessive_sso_logon_errors.toml +++ b/rules/integrations/o365/credential_access_user_excessive_sso_logon_errors.toml @@ -2,9 +2,9 @@ creation_date = "2021/05/17" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2024/01/05" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic", "Austin Songer"] diff --git a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml index c418c04f6e7..8f99baefdef 100644 --- a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml +++ b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_dlp_policy_removed.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/20" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml index f0147f15d01..c160e5ed558 100644 --- a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml +++ b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_policy_deletion.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/19" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml index 3c1f78020b4..b7384af5a46 100644 --- a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml +++ b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_malware_filter_rule_mod.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/19" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml index f4cdcd1267c..df89e34c06e 100644 --- a/rules/integrations/o365/defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml +++ b/rules/integrations/o365/defense_evasion_microsoft_365_exchange_safe_attach_rule_disabled.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/19" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/defense_evasion_microsoft_365_mailboxauditbypassassociation.toml b/rules/integrations/o365/defense_evasion_microsoft_365_mailboxauditbypassassociation.toml index 38bd2cf8f6e..147b3d4a33a 100644 --- a/rules/integrations/o365/defense_evasion_microsoft_365_mailboxauditbypassassociation.toml +++ b/rules/integrations/o365/defense_evasion_microsoft_365_mailboxauditbypassassociation.toml @@ -2,9 +2,9 @@ creation_date = "2022/01/13" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_creation.toml b/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_creation.toml index 7eab6e4823b..4cb6fe52e78 100644 --- a/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_creation.toml +++ b/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_creation.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/18" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_mod.toml b/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_mod.toml index ede1ab7c7ee..b765b557589 100644 --- a/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_mod.toml +++ b/rules/integrations/o365/exfiltration_microsoft_365_exchange_transport_rule_mod.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/19" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/impact_microsoft_365_potential_ransomware_activity.toml b/rules/integrations/o365/impact_microsoft_365_potential_ransomware_activity.toml index e4406be073c..d562df516f4 100644 --- a/rules/integrations/o365/impact_microsoft_365_potential_ransomware_activity.toml +++ b/rules/integrations/o365/impact_microsoft_365_potential_ransomware_activity.toml @@ -2,9 +2,9 @@ creation_date = "2021/07/15" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Austin Songer"] diff --git a/rules/integrations/o365/impact_microsoft_365_unusual_volume_of_file_deletion.toml b/rules/integrations/o365/impact_microsoft_365_unusual_volume_of_file_deletion.toml index 86638000cff..288995e6a39 100644 --- a/rules/integrations/o365/impact_microsoft_365_unusual_volume_of_file_deletion.toml +++ b/rules/integrations/o365/impact_microsoft_365_unusual_volume_of_file_deletion.toml @@ -2,9 +2,9 @@ creation_date = "2021/07/15" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Austin Songer"] diff --git a/rules/integrations/o365/initial_access_microsoft_365_abnormal_clientappid.toml b/rules/integrations/o365/initial_access_microsoft_365_abnormal_clientappid.toml index df836da582d..35c80c20d05 100644 --- a/rules/integrations/o365/initial_access_microsoft_365_abnormal_clientappid.toml +++ b/rules/integrations/o365/initial_access_microsoft_365_abnormal_clientappid.toml @@ -1,10 +1,10 @@ [metadata] creation_date = "2023/07/18" -maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup, New Term" -min_stack_version = "8.6.0" integration = ["o365"] -updated_date = "2023/07/18" +maturity = "production" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml b/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml index ecd64140492..c08ab9f6604 100644 --- a/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml +++ b/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_policy_deletion.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/19" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml b/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml index 6655528607b..61782f36120 100644 --- a/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml +++ b/rules/integrations/o365/initial_access_microsoft_365_exchange_anti_phish_rule_mod.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/19" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/initial_access_microsoft_365_exchange_safelinks_disabled.toml b/rules/integrations/o365/initial_access_microsoft_365_exchange_safelinks_disabled.toml index b9f3ff185b6..a9b2dd6b3ef 100644 --- a/rules/integrations/o365/initial_access_microsoft_365_exchange_safelinks_disabled.toml +++ b/rules/integrations/o365/initial_access_microsoft_365_exchange_safelinks_disabled.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/18" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/initial_access_microsoft_365_user_restricted_from_sending_email.toml b/rules/integrations/o365/initial_access_microsoft_365_user_restricted_from_sending_email.toml index 5841c41a3f7..0453d71ad3a 100644 --- a/rules/integrations/o365/initial_access_microsoft_365_user_restricted_from_sending_email.toml +++ b/rules/integrations/o365/initial_access_microsoft_365_user_restricted_from_sending_email.toml @@ -2,9 +2,9 @@ creation_date = "2021/07/15" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Austin Songer"] diff --git a/rules/integrations/o365/initial_access_o365_user_reported_phish_malware.toml b/rules/integrations/o365/initial_access_o365_user_reported_phish_malware.toml index b90856dfa65..90c76c255e5 100644 --- a/rules/integrations/o365/initial_access_o365_user_reported_phish_malware.toml +++ b/rules/integrations/o365/initial_access_o365_user_reported_phish_malware.toml @@ -2,9 +2,9 @@ creation_date = "2022/01/12" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/lateral_movement_malware_uploaded_onedrive.toml b/rules/integrations/o365/lateral_movement_malware_uploaded_onedrive.toml index 858fec97bf8..52de44169fd 100644 --- a/rules/integrations/o365/lateral_movement_malware_uploaded_onedrive.toml +++ b/rules/integrations/o365/lateral_movement_malware_uploaded_onedrive.toml @@ -2,9 +2,9 @@ creation_date = "2022/01/10" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/lateral_movement_malware_uploaded_sharepoint.toml b/rules/integrations/o365/lateral_movement_malware_uploaded_sharepoint.toml index 6cfc929ce32..480d23d769c 100644 --- a/rules/integrations/o365/lateral_movement_malware_uploaded_sharepoint.toml +++ b/rules/integrations/o365/lateral_movement_malware_uploaded_sharepoint.toml @@ -2,9 +2,9 @@ creation_date = "2022/01/10" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/persistence_exchange_suspicious_mailbox_right_delegation.toml b/rules/integrations/o365/persistence_exchange_suspicious_mailbox_right_delegation.toml index 72fb548f546..e62ba72b5bb 100644 --- a/rules/integrations/o365/persistence_exchange_suspicious_mailbox_right_delegation.toml +++ b/rules/integrations/o365/persistence_exchange_suspicious_mailbox_right_delegation.toml @@ -2,9 +2,9 @@ creation_date = "2021/05/17" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic", "Austin Songer"] diff --git a/rules/integrations/o365/persistence_microsoft_365_exchange_dkim_signing_config_disabled.toml b/rules/integrations/o365/persistence_microsoft_365_exchange_dkim_signing_config_disabled.toml index d441a433ab8..daf801209d0 100644 --- a/rules/integrations/o365/persistence_microsoft_365_exchange_dkim_signing_config_disabled.toml +++ b/rules/integrations/o365/persistence_microsoft_365_exchange_dkim_signing_config_disabled.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/18" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/persistence_microsoft_365_exchange_management_role_assignment.toml b/rules/integrations/o365/persistence_microsoft_365_exchange_management_role_assignment.toml index 33a666d1488..d3c59704944 100644 --- a/rules/integrations/o365/persistence_microsoft_365_exchange_management_role_assignment.toml +++ b/rules/integrations/o365/persistence_microsoft_365_exchange_management_role_assignment.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/20" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/persistence_microsoft_365_global_administrator_role_assign.toml b/rules/integrations/o365/persistence_microsoft_365_global_administrator_role_assign.toml index 336accf9d11..94cfa618762 100644 --- a/rules/integrations/o365/persistence_microsoft_365_global_administrator_role_assign.toml +++ b/rules/integrations/o365/persistence_microsoft_365_global_administrator_role_assign.toml @@ -2,9 +2,9 @@ creation_date = "2022/01/06" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/persistence_microsoft_365_teams_custom_app_interaction_allowed.toml b/rules/integrations/o365/persistence_microsoft_365_teams_custom_app_interaction_allowed.toml index e0b4b1af452..e4a143449a3 100644 --- a/rules/integrations/o365/persistence_microsoft_365_teams_custom_app_interaction_allowed.toml +++ b/rules/integrations/o365/persistence_microsoft_365_teams_custom_app_interaction_allowed.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/30" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/persistence_microsoft_365_teams_external_access_enabled.toml b/rules/integrations/o365/persistence_microsoft_365_teams_external_access_enabled.toml index a263a54f623..a5288bc405e 100644 --- a/rules/integrations/o365/persistence_microsoft_365_teams_external_access_enabled.toml +++ b/rules/integrations/o365/persistence_microsoft_365_teams_external_access_enabled.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/30" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/persistence_microsoft_365_teams_guest_access_enabled.toml b/rules/integrations/o365/persistence_microsoft_365_teams_guest_access_enabled.toml index da3379715f2..03d0fdbd60a 100644 --- a/rules/integrations/o365/persistence_microsoft_365_teams_guest_access_enabled.toml +++ b/rules/integrations/o365/persistence_microsoft_365_teams_guest_access_enabled.toml @@ -2,9 +2,9 @@ creation_date = "2020/11/20" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Elastic"] diff --git a/rules/integrations/o365/privilege_escalation_new_or_modified_federation_domain.toml b/rules/integrations/o365/privilege_escalation_new_or_modified_federation_domain.toml index 41046f8264a..7cc85cff038 100644 --- a/rules/integrations/o365/privilege_escalation_new_or_modified_federation_domain.toml +++ b/rules/integrations/o365/privilege_escalation_new_or_modified_federation_domain.toml @@ -2,9 +2,9 @@ creation_date = "2021/05/17" integration = ["o365"] maturity = "production" -min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" -updated_date = "2023/06/22" +min_stack_comments = "Breaking change at 8.8.0 for Microsoft 365 Integration." +min_stack_version = "8.8.0" +updated_date = "2024/04/02" [rule] author = ["Austin Songer"]