Lucaazel

Does this mean we can have many [detection types](https://www.elastic.co/guide/en/security/current/about-rules.html#rule-types) (other types than `query`), such as `new_terms` or `threshold`?