Greetings,
I am not sure that I use right category so I am sorry in advance.
Is it possible to add exceptions to the rule using Detection as Code from Elastic directly in the rule file (.toml) without creating a Shared Exception list. I would appreciate any help and examples with this since I have no information regarding this topic.