Open
Description
Repository Feature
Core Repo - (rule management, validation, testing, lib, cicd, etc.)
Problem Description
Based on recent changes in Kibana, the solution now expects us to preserve the rule_id for elastic_endpoint_security. We need to now add a unit test to ensure we don't inadvertently change the rule in the future without considering the impact upstream.
Today, we can change the rule_id and the unit tests will pass.
Desired Solution
Simple unit test to enforce specific rules should not change. The only rule_id referenced so far appears to be 9a1a2dae-0b5f-4c3d-8305-a268d404c306.
Considered Alternatives
N/A
Additional Context
Related - https://github.com/elastic/security-team/issues/7216