Backport missing custom-documentation fields to 8.19#754

Open

nicholasberlin wants to merge 9 commits into

8.19from

field-mappings-8.19

Commits on Jul 6, 2026

Add security event metrics to custom documentation (#652)

AsuNa-jp
authored and
nicholasberlin
committed
Enhance process event metrics (#653)
nicholasberlin
committed
Add network.direction to docs (#659)

ricardo-estc
authored and
nicholasberlin
committed
Add kernel_process_events fields (#716)

matthewh-elastic
authored and
nicholasberlin
committed
Add process.Ext.trusted to custom docs for already-running process events (#697)

gabriellandau
authored and
nicholasberlin
committed
Add missing field in the ASM API events custom documentation (#726)

AsuNa-jp
authored and
nicholasberlin
committed
Fix Linux and macOS behavior alert custom doc for subtechnique fields (#740)

nicholasberlin
and
claude
committed

Commits on Jul 10, 2026