[Rule Tuning] Convert simple KQL Windows rules to EQL
w0rk3r opened this issue · comments
Description
We should evaluate the conversion from KQL simple queries (which don't include new terms and threshold rules) to EQL, aiming to solve case-sensitiveness problems and make them more manageable around exclusions.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.