From 07ad6ce56509cc4d85fefe5b8b0748f382cb3d1d Mon Sep 17 00:00:00 2001 From: Davis Plumlee Date: Wed, 17 Dec 2025 13:54:39 -0500 Subject: [PATCH 1/3] updates mitre versions --- solutions/security/detect-and-alert/mitre-attandckr-coverage.md | 1 + 1 file changed, 1 insertion(+) diff --git a/solutions/security/detect-and-alert/mitre-attandckr-coverage.md b/solutions/security/detect-and-alert/mitre-attandckr-coverage.md index 1ba659b791..176a4d7e72 100644 --- a/solutions/security/detect-and-alert/mitre-attandckr-coverage.md +++ b/solutions/security/detect-and-alert/mitre-attandckr-coverage.md @@ -38,6 +38,7 @@ Refer to the following table to find the MITRE ATT&CK® version that's mapped to | :---- | :---- | | [v16.1](https://attack.mitre.org/resources/updates/updates-october-2024/) | • 9.0.0-9.0.6
• 9.1.0-9.1.3| | [v17.1](https://attack.mitre.org/resources/updates/updates-april-2025/) | • 9.0.7
• 9.1.4
• {applies_to}`stack: ga 9.2.0`
• {{serverless-short}} | +| [v18.1](https://attack.mitre.org/resources/updates/updates-october-2025/) | • 9.1.10
• 9.2.4
• {applies_to}`stack: ga 9.3.0`
• {{serverless-short}} | ## Filter rules [security-rules-coverage-filter-rules] From 62395cbc1d02dab7086186cf2c27cbe26cb65406 Mon Sep 17 00:00:00 2001 From: Davis Plumlee <56367316+dplumlee@users.noreply.github.com> Date: Wed, 17 Dec 2025 14:18:36 -0500 Subject: [PATCH 2/3] Update solutions/security/detect-and-alert/mitre-attandckr-coverage.md Co-authored-by: Nastasha Solomon <79124755+nastasha-solomon@users.noreply.github.com> --- solutions/security/detect-and-alert/mitre-attandckr-coverage.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/solutions/security/detect-and-alert/mitre-attandckr-coverage.md b/solutions/security/detect-and-alert/mitre-attandckr-coverage.md index 176a4d7e72..8ce00d948a 100644 --- a/solutions/security/detect-and-alert/mitre-attandckr-coverage.md +++ b/solutions/security/detect-and-alert/mitre-attandckr-coverage.md @@ -37,7 +37,7 @@ Refer to the following table to find the MITRE ATT&CK® version that's mapped to | MITRE ATT\&CK® version | {{elastic-sec}} version | | :---- | :---- | | [v16.1](https://attack.mitre.org/resources/updates/updates-october-2024/) | • 9.0.0-9.0.6
• 9.1.0-9.1.3| -| [v17.1](https://attack.mitre.org/resources/updates/updates-april-2025/) | • 9.0.7
• 9.1.4
• {applies_to}`stack: ga 9.2.0`
• {{serverless-short}} | +| [v17.1](https://attack.mitre.org/resources/updates/updates-april-2025/) | • 9.0.7
• 9.1.4
• 9.2.0`
• {{serverless-short}} | | [v18.1](https://attack.mitre.org/resources/updates/updates-october-2025/) | • 9.1.10
• 9.2.4
• {applies_to}`stack: ga 9.3.0`
• {{serverless-short}} | From d4ceaa70d799f389a1e8adbeb5652306ec51bdfb Mon Sep 17 00:00:00 2001 From: Nastasha Solomon Date: Wed, 17 Dec 2025 15:07:06 -0500 Subject: [PATCH 3/3] fix table formatting --- .../security/detect-and-alert/mitre-attandckr-coverage.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/solutions/security/detect-and-alert/mitre-attandckr-coverage.md b/solutions/security/detect-and-alert/mitre-attandckr-coverage.md index 8ce00d948a..bb585920a9 100644 --- a/solutions/security/detect-and-alert/mitre-attandckr-coverage.md +++ b/solutions/security/detect-and-alert/mitre-attandckr-coverage.md @@ -37,8 +37,8 @@ Refer to the following table to find the MITRE ATT&CK® version that's mapped to | MITRE ATT\&CK® version | {{elastic-sec}} version | | :---- | :---- | | [v16.1](https://attack.mitre.org/resources/updates/updates-october-2024/) | • 9.0.0-9.0.6
• 9.1.0-9.1.3| -| [v17.1](https://attack.mitre.org/resources/updates/updates-april-2025/) | • 9.0.7
• 9.1.4
• 9.2.0`
• {{serverless-short}} | -| [v18.1](https://attack.mitre.org/resources/updates/updates-october-2025/) | • 9.1.10
• 9.2.4
• {applies_to}`stack: ga 9.3.0`
• {{serverless-short}} | +| [v17.1](https://attack.mitre.org/resources/updates/updates-april-2025/) | • 9.0.7
• 9.1.4
• 9.2.0| +| [v18.1](https://attack.mitre.org/resources/updates/updates-october-2025/) | • 9.1.10
• 9.2.4
• {applies_to}`stack: ga 9.3.0`
• {{serverless-short}}| ## Filter rules [security-rules-coverage-filter-rules]