Skip to content

[fim] Add etw backend to fim#18420

Merged
marc-gr merged 2 commits intoelastic:mainfrom
marc-gr:feat/etw
Apr 16, 2026
Merged

[fim] Add etw backend to fim#18420
marc-gr merged 2 commits intoelastic:mainfrom
marc-gr:feat/etw

Conversation

@marc-gr
Copy link
Copy Markdown
Contributor

@marc-gr marc-gr commented Apr 16, 2026

Proposed commit message

Add etw backend to fim

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@marc-gr marc-gr added enhancement New feature or request Integration:fim File Integrity Monitoring Team:Security-Windows Platform Security Windows Platform team [elastic/sec-windows-platform] labels Apr 16, 2026
@marc-gr marc-gr marked this pull request as ready for review April 16, 2026 08:57
@marc-gr marc-gr requested a review from a team as a code owner April 16, 2026 08:57
@elasticmachine
Copy link
Copy Markdown

Pinging @elastic/sec-windows-platform (Team:Security-Windows Platform)

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 16, 2026

Vale Linting Results

Summary: 2 warnings, 8 suggestions found

⚠️ Warnings (2)
File Line Rule Message
packages/fim/docs/README.md 151 Elastic.DontUse Don't use 'just'.
packages/fim/docs/README.md 160 Elastic.Latinisms Latin terms and abbreviations are a common source of confusion. Use 'using' instead of 'via'.
💡 Suggestions (8)
File Line Rule Message
packages/fim/docs/README.md 135 Elastic.WordChoice Consider using 'can, might' instead of 'may', unless the term is in the UI.
packages/fim/docs/README.md 141 Elastic.Wordiness Consider using 'tell' instead of 'inform'.
packages/fim/docs/README.md 141 Elastic.WordChoice Consider using 'can, might' instead of 'may', unless the term is in the UI.
packages/fim/docs/README.md 141 Elastic.WordChoice Consider using 'can, might' instead of 'may', unless the term is in the UI.
packages/fim/docs/README.md 143 Elastic.WordChoice Consider using 'efficiently' instead of 'simply', unless the term is in the UI.
packages/fim/docs/README.md 143 Elastic.WordChoice Consider using 'can, might' instead of 'may', unless the term is in the UI.
packages/fim/docs/README.md 146 Elastic.WordChoice Consider using 'run, start' instead of 'execute', unless the term is in the UI.
packages/fim/docs/README.md 151 Elastic.WordChoice Consider using 'can, might' instead of 'may', unless the term is in the UI.

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

@elasticmachine
Copy link
Copy Markdown

💚 Build Succeeded

History

@marc-gr marc-gr merged commit fbeb099 into elastic:main Apr 16, 2026
11 checks passed
@marc-gr marc-gr deleted the feat/etw branch April 16, 2026 10:27
@elastic-vault-github-plugin-prod
Copy link
Copy Markdown

Package fim - 1.17.0 containing this change is available at https://epr.elastic.co/package/fim/1.17.0/

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Apr 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:fim File Integrity Monitoring Team:Security-Windows Platform Security Windows Platform team [elastic/sec-windows-platform]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[FIM]: Expose the ETW-based backend

4 participants