Garrett Spong

[Security Solution][Detections] Unexpected behaviors of saved queries in detection rules

8

### Summary This is a meta bug capturing several inconsistent/undesirable behaviors related to use of saved queries in detection rules. ### 1. Saved query filters referencing missing index patterns automatically...

[Github] Add support for `mdx` files

2

### Problem Description Currently the Github connector only supports syncing documents with `.markdown`, `.md`, and `.rst` file extensions as [per the docs](https://www.elastic.co/guide/en/enterprise-search/current/connectors-github.html#connectors-github-client-documents-syncs). I've been working to add support for exposing...

[Github] `Error while checking for inaccessible repositories. Exception: 403` when trying to sync `private` repositories

15

## Bug Description I was trying to sync some internal documentation from the https://github.com/elastic/security-team repo, which is an Elastic `private` repository (not `internal`), and if specifying the repo in the...

[Security Assistant] Updates Knowledge Base ES Schema, OAS, and API to support `IndexEntries`

2

## Summary This is a follow-up to https://github.com/elastic/kibana/pull/184974 that updates the KB Entries API's (and underlying schema) to support `IndexEntries` in addition to `DocumentEntries`. `IndexEntries` are entries in the Knowledge...

[Zoom] OAuth scopes in documentation do not match latest available scopes provided by Zoom

9

## Bug Description In setting up the Zoom connector to test with the latest Security Assistant Knowledge Base features, it was noted that the scopes detailed in the [Zoom connector...

[Security Solution] Update Category and Rule Names for Security Rules within Rules and Connectors UI

4

The `Rules and Connectors` UI within `Stack Management` displays all the different rule types registered with the Alerting framework, and even provides grouping by category within the `Type` filter. This...

[Agent Builder] Adds Integration Knowledge platform tool

2

## Summary Adds an integration knowledge tool to Agent Builder that retrieves documentation from Fleet-installed integrations using semantic search on the `.integration_knowledge` index. The tool uses the conditional availability pattern...