Skip to content

Remove 151 Deprecated detections, stories, baselines, investigations - Github - #3366

Merged
patel-bhavin merged 55 commits into
developfrom
remove_detections
Mar 18, 2025
Merged

patel-bhavin merged 55 commits into
developfrom
remove_detections

Conversation

@patel-bhavin

@patel-bhavin patel-bhavin commented Feb 26, 2025 •

Copy link
Copy Markdown
Contributor
  • Moving to the top level removed/ directory.
  • adding deprecation_mapping.yml (includes 2 splunk detections
  • adding semi - manually generated csv from the mapping yml (to be fully automated in next release)

@patel-bhavin patel-bhavin added this to the v5.2.0 milestone Feb 26, 2025
@patel-bhavin patel-bhavin changed the title Remove 152 Deprecated detections Remove 151 Deprecated detections - Github Feb 26, 2025
@patel-bhavin patel-bhavin changed the title Remove 151 Deprecated detections - Github Remove 151 Deprecated detections, stories, baselines, investigations - Github Feb 26, 2025

@pyth0n1c pyth0n1c left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am approving. I discussed with @patel-bhavin and we came to a few points of agreement:

  1. If ONLY a status is changed for a file which does not use ES8 versioning, like baselines, a version bump does not need to happen.
  2. When something is moved from a deprecated/ folder into removed/ NOTHING should be updated. This includes the date and the version.
  3. There were a number of baselines we failed to tag for removal in 5.2.0. However, the detections which use them WERE tagged appropriately for removal. Since they are not uselful without the detections they support, they have been moved directly from production->removed without spending 2 releases in the deprecated state.

@patel-bhavin
patel-bhavin merged commit 4583864 into develop Mar 18, 2025
@patel-bhavin
patel-bhavin deleted the remove_detections branch March 18, 2025 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants