As the title suggests, some prebuilt security rules are failing due to some fields not being present in the Elastic Defend telemetry.
From this example, the rule logic has process.command_line , However, the file telemetry for Elastic Defend does not have process.command_line I saw a numerous number of rules that have the same problem
My question is, should I fix it or leave it until it is fixed from your side? I also could make a pull request with a fix if that was possible.
Thank you.