Changes to Delete a detection rule

Changed in 4 of the 176 revisions of this API.▲48●16○32

1. Sep 9, 2026f2ad87b81412▲16○16
2. Aug 26, 202604c196070f95○8
3. Aug 3, 2026f418569a8423▲32●8○8
4. Aug 3, 2026707a2918b22b●8

What changed

• Sep 9, 2026f2ad87b81412▲16○16See the full diff
  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added subschema #1 subschema #2 to the anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-added

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

  • ○

    removed subschema #1 subschema #2 from the anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_OsqueryResponseAction]/params/queries/items/ecs_mapping/additionalProperties/value response property oneOf list for the response status 200

    response-property-one-of-removed

• Aug 26, 202604c196070f95○8See the full diff
  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

  • ○

    the max_signals response's property default value 100 was removed for the status 200

    response-property-default-value-removed

• Aug 3, 2026f418569a8423▲32●8○8See the full diff
  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    added Security_Detections_API_KillProcessParams Security_Detections_API_SuspendProcessParams to the anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property oneOf list for the response status 200

    response-property-one-of-added

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    the anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response's property type changed from object to no type for status 200

    response-property-type-changed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/command from the response with the 200 status

    response-required-property-removed

  • ▲

    removed the required property anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/config from the response with the 200 status

    response-required-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ●

    removed the optional property anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams]/comment from the response with the 200 status

    response-optional-property-removed

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

  • ○

    added discriminator to anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/response_actions/items/oneOf[#/components/schemas/Security_Detections_API_EndpointResponseAction]/params/oneOf[#/components/schemas/Security_Detections_API_ProcessesParams] response property for the response status 200

    response-property-discriminator-added

• Aug 3, 2026707a2918b22b●8See the full diff
  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_EqlRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_EsqlRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_MachineLearningRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_NewTermsRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_QueryRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_SavedQueryRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_ThreatMatchRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

  • ●

    added the new endpoint_custom_yara_signatures enum value to the anyOf[#/components/schemas/Security_Detections_API_ThresholdRule]/allOf[subschema #1]/exceptions_list/items/type response property for the response status 200

    response-property-enum-value-added

Of the 176 revisions, 20 have no diff computed.