diff --git a/rfcs/0000-rfc-template.md b/rfcs/text/0046-additional-rule-field.md similarity index 63% rename from rfcs/0000-rfc-template.md rename to rfcs/text/0046-additional-rule-field.md index 1ac7c95052..f9354ce2f2 100644 --- a/rfcs/0000-rfc-template.md +++ b/rfcs/text/0046-additional-rule-field.md @@ -1,35 +1,27 @@ -# 0000: Name of RFC +# 0000: Additional Rule Field - Stage: **0 (strawperson)** - Date: **TBD** - + +This RFC proposes addition of 1 new field (rule.remediation) in rule fieldset to the Elastic Common Schema (ECS). The goal of this field is to provide more context to the users in the rule fieldset, rule.remediation will be used to capture the remediation instructions associated with rules, it is generally provided by the benchmark or framework from which the rule is published. - - ## Fields - +The `rule` fields being proposed are as follows: + +Field | Type | Example | Description/Usage +-- | -- | -- | -- +rule.remediation | array | Enable encryption on all S3 buckets | Used to capture remediation instructions that come from the benchmark / framework the rule is from + - ## Usage @@ -79,25 +71,21 @@ Stage 3: Document resolutions for all existing concerns. Any new concerns should The following are the people that consulted on the contents of this RFC. -* TBD | author +* @smriti0321 | author +* @tinnytintin10 | Product Manager +* @oren-zohar | Engineering Manager +* @orouz | Engineer +* @trisch-me | Security ECS team - ## References + + ### RFC Pull Requests