# Detection Rule CLI still relevant?

**URL:** <https://discuss.elastic.co/t/detection-rule-cli-still-relevant/328987>\
**Category:** Elastic Security\
**Tags:** detection-rules\
**Created:** [March 31, 2023, 12:06am UTC](https://discuss.elastic.co/t/detection-rule-cli-still-relevant/328987 "2023-03-31T00:06:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![JCoffey85](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jcoffey85/32/119231_2.png) [@JCoffey85](https://discuss.elastic.co/u/JCoffey85)\
**Post date:** [March 31, 2023, 12:06am UTC](https://discuss.elastic.co/t/detection-rule-cli-still-relevant/328987/1 "2023-03-31T00:06:01Z")

</div>

Hello All, Long time lurker and new user to Elastic Stack.

Is the Detection-Rule CLI still applicable in the 'latest n greatest' installation of elastic 8.6?

([GitHub - elastic/detection-rules: Rules for Elastic Security's detection engine](https://github.com/elastic/detection-rules))

Thank you in advance!

---

<div class="post-metadata">

**Author:** ![spong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spong/32/54343_2.png) [@spong](https://discuss.elastic.co/u/spong)\
**Post date:** [April 4, 2023, 4:07pm UTC](https://discuss.elastic.co/t/detection-rule-cli-still-relevant/328987/2 "2023-04-04T16:07:07Z")

</div>

Hey there @JCoffey85! 👋

Thanks for _lurking_ and now posting! 🙂

So the [detection-rules repo](https://github.com/elastic/detection-rules) and [corresponding CLI](https://github.com/elastic/detection-rules/blob/main/CLI.md) are still applicable for the latest and greatest rule releases.

This repo is the 'single source of truth' for all of our bundled detection rules within Elastic Security, and from this repo we'll cut releases of the `Prebuilt Security Detection Rules` [integration](https://docs.elastic.co/en/integrations/security_detection_engine) which can be installed directly from within the stack via the `Integrations` app:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/6/d6b01e62c46de4f574b942c1d82ee069fe695f7c.png)

Similar to the docs link for this integration above, you can fetch a `json` representation of [all available packages](https://epr.elastic.co/search?package=security_detection_engine&all=true) directly from EPR (Elastic Package Registry).

* * *

Lastly, you're still more than welcome to leverage the [Detection Rules CLI](https://github.com/elastic/detection-rules/blob/main/CLI.md) from the rules repo to test/manage/load rules as you wish, and you will have access to the latest 'pre-release' rules before we cut the next integration release (i.e. iterative updates to rules between stack releases, so be careful as they may not be fully tested or compatible with current integrations quite yet).

Hope that helps! And please do let us know if you have any other questions 🙂

Cheers!  
Garrett

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2023, 4:07pm UTC](https://discuss.elastic.co/t/detection-rule-cli-still-relevant/328987/3 "2023-05-02T16:07:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.