Marshall Main

[Security Solution][Alerts] Add new terms tour

1

## Summary 

Use custom types with defined input type in t.type, t.intersection, etc

2

io-ts version: 2.0.5 Typescript version: 3.9 **Background:** We're using io-ts to do request validation in the backend of a web app. We share the io-ts types with the front end...

Add support for copying labels from original PR

2

### Summary Currently the backport config options support defining a list of labels to add to the backport PRs. It would be great to add the ability to define labels...

[Security Solution][Alerts] Exceptions on nested fields cause rule failure if nested field isn't mapped

3

https://github.com/elastic/kibana/issues/121387 The error message in this case is very verbose and hard to read. A quick enhancement would be to format the error message better and/or detect that the error...

## Summary Removes the new terms tour [added in 8.4](https://github.com/elastic/kibana/pull/138469) to highlight the new terms rule type.

Elasticsearch DSL clause like `terms` on multiple fields

1

### Description In the Security Solution we have [indicator match rules](https://www.elastic.co/guide/en/security/current/rules-ui-create.html#create-indicator-rule) that essentially `join` documents from an "indicator index" with the source data indices based on values in one or...

[Security Solution] Quickstart script tooling for Detections and Response

2

## Summary Creates CLI script tooling for building data, rules, exceptions, and lists in any (local, cloud, serverless) environment for manual testing. The initial commits here add generated clients for...

[Security Solution][Alerts] Threshold rule alert history should be invalidated if rule is updated

2

Currently, threshold rules use alerting framework state to store information about written alerts. This information is used in future rule executions to limit the search query and exclude documents that...