[Meta][Security] 8.19 + 9.1 Security checklist

[nastasha-solomon]

This issue tracks doc needs for the 8.19/9.1 Security release.

Release docs

• Release notes:
  • Security 9.1 release notes #1889
  • Security 8.19 release notes security-docs#6900
• What's new page (8.19 only): What's new in 8.19 security-docs#6875

Cloud Security

TBD

GenAI

• [Internal]: Elastic Managed LLM: Default AI Model for Elastic AI Assistant [Security Docs] #1754
• [Internal]: Replacing default Quick Prompts with Recommendation Tiles #1932
• [Internal]: Persist and View Historical AD Discoveries #1939
• [Internal]: Attack Discovery Scheduling and Notification #1941
• https://github.com/elastic/docs-content-internal/issues/70
• https://github.com/elastic/docs-content-internal/issues/71
• https://github.com/elastic/docs-content-internal/issues/101
• https://github.com/elastic/docs-content-internal/issues/102

Detection Engine

• Gap remediation:
  • [Internal]: Gaps became GA #2111
  • [REQUEST]: Add docs for the new bulk gap filling feature #1435
  • [Internal]: Rule gaps callout and gaps overview panel #1887
• Bulk-suppression:
  • [Internal]: Add bulk alert suppression documentation #1719
• Doc issue for new fields being added to the Security alerts index - TBC

Rule Management

• Prebuilt rules:
  • UX copy request for Detection rule workflows - Revert a customized prebuilt rule #1241
  • [UI copy]: Refine copy for bulk-updating prebuilt rules #1063
  • [Internal]: Security solution prebuilt rule reversion documentation #1940

Entity Analytics

• [Internal]: New Entity Analytics Workflow (Overview and Privileged User Monitoring) #1646
• [REQUEST]: Remove deployment context for unassigned criticality level from 9.1 #1017
• [UI copy]: Privileged user monitoring copy request #2018

Threat Hunting

• [Internal]: remove enableVisualizationsInFlyout advanced setting #1464
• [REQUEST]: Edit highlighted fields in alert flyout #1235
• [REQUEST]: Enable endpoint actions in events #674
• https://github.com/elastic/docs-content-internal/issues/96

EDR Workflows

• [Internal]: Spaces support for Elastic Defend #1514
• [Internal]: MacOS Security & DNS events available in Defend integration policy (event collection) #1518
• [Internal]: Analyzer support for 3rd party EDRs #2024
• Response actions:
  • [Request] Response Console external EDR scripts picker #1498
  • [Internal]: Additional Microsoft Defender for Endpoint response action #1532