capabilities.work

Replace a detection rule

One step with Elastic Stack. We can help you get access.

Get something done

Replace a detection rule

with Elastic Stack · Threat Detection & Response Management

Use Elastic Stack: its Kibana Security Detections API lets you replace a detection rule in a single step (PUT /api/detection_engine/rules). capabilities.work can help you get signed up and connected.

  • Does a full rule update delete the fields I leave out?
  • Can I overwrite an entire detection rule definition in one call?
Say it to your AI assistant
  • Replace the whole definition of an existing detection rule with my new version.
  • Overwrite this detection rule completely, dropping any fields I don't specify.
For your developer

PUT /api/detection_engine/rules in Kibana Security Detections API. Full spec on APIs.io.

More you can do with Elastic Stack

Assign users to attack discovery alertsSearch and aggregate attack discoveriesChange the workflow status of attack discoveriesTag or untag attack discoveriesCheck the security alerts indexCreate the security alerts indexDelete the security alerts indexCheck my security detection privilegesGet a detection ruleCreate a detection ruleDelete a detection ruleChange specific fields of a detection rule