cloudbeat
cloudbeat copied to clipboard
Add CIS benchmarks Severity
Motivation
In the Alerts Epic we are introducing severity for CIS benchmark rules, the severity is initially planned to be used to create a Detection Rule.
The severity mapping for each rule was added here by @tinnytintin10, and I think it's a good candidate to be added on this repository.
Definition of done
What needs to be completed at the end of this task
- [ ] All benchmarks rules listed here will have their severity fields in the respective
data.yml
file - [ ] The severity will also be added to the integrations repository to be consumed by Kibana.
- [ ] Update the csp rule assets based on the updated rules
data.yml
(use the script)
Out of scope
Default severity for rules not listed in the Spreadsheet .
Related tasks/epics
- https://github.com/elastic/security-team/issues/4165
@tinnytintin10 - is severity a priority for 8.11?