Unskip tests for RAC rule migration

[madirey]

Several tests were skipped as part of the RAC rule migration PR which will need to be fixed ASAP. I've outlined the skipped tests below:

• plugins/security_solution/cypress/integration/detection_alerts/attach_to_case.spec.ts: "should allow a user with crud privileges to attach alerts to cases"

  • unskipped in: [Security Solution] Fix attach to case test #119589

• plugins/security_solution/cypress/integration/detection_alerts/cti_enrichments.spects: "Displays enrichment matched.* fields on the timeline"

  • This test is not going to work until the following issue is fixed: [Security Solution] Enriched fields are not displayed on the alert timeline view #119633
  • unskipped in: [Security Solution][CTI] Unskips "Displays enrichment matched.* fields on the timeline" test #119938

• plugins/security_solution/cypress/integration/detection_rules/custom_query_rule.spec.ts: "Creates and activates a new rule"

  • unskipped in [Security Solution][RAC][Cypress] Unskip some tests #117596

• plugins/security_solution/cypress/integration/detection_rules/event_correlation_rule.spec.ts: "Detection rules, EQL"

  • unskipped in [Security Solution][RAC][Cypress] Unskip some tests #117596

• plugins/security_solution/cypress/integration/detection_rules/indicator_match_rule.spec.ts: "Creates and activates a new Indicator Match rule"

  • unskipped in [Security Solution][RAC][Cypress] Unskip some tests #117596

• plugins/security_solution/cypress/integration/detection_rules/indicator_match_rule.spec.ts: "Investigate alert in timeline"

  • unskipped in [Security Solution] Unskip remaining Cypress tests from RAC rules migration #122661

• plugins/security_solution/cypress/integration/detection_rules/override.spec.ts: "Creates and activates a new custom rule with override option"

  • unskipped in [Security Solution][RAC][Cypress] Unskip some tests #117596

• plugins/security_solution/cypress/integration/detection_rules/threshold_rule.spec.ts: "Creates and activates a new threshold rule"

• x-pack/plugins/security_solution/cypress/integration/exceptions/from_rule.spec.ts: "Creates an exception and deletes it"

  • unskipped in [Security Solution][RAC][Cypress] Unskip some tests #117596

• plugins/security_solution/cypress/integration/timelines/fields_browser.spec.ts: "displays a count of only the fields in the selected category that match the filter input"

  • unskipped in [Security Solution] Unskip remaining Cypress tests from RAC rules migration #122661

• plugins/security_solution/public/common/components/event_details/alert_summary_view.test.tsx: "Memory event code renders additional summary rows"

  • unskipped in [Security Solution] Unskip remaining Jest tests from RAC rules migration #122677

• plugins/security_solution/public/common/components/event_details/alert_summary_view.test.tsx: "Behavior event code renders additional summary rows"

  • unskipped in [Security Solution] Unskip remaining Jest tests from RAC rules migration #122677

• plugins/security_solution/public/detections/components/rules/step_about_rule/index.test.tsx: "StepAboutRuleComponent"

  • unskipped in [Security Solution] Unskip remaining Jest tests from RAC rules migration #122677

• plugins/security_solution/server/lib/detection_engine/routes/rules/add_prepackaged_rules_route.test.ts: "add_prepackaged_rules_route - RAC"

  • unskipped in [Security Solution] Unskip remaining Jest tests from RAC rules migration #122677

• plugins/security_solution/server/lib/detection_engine/rules/update_rules.test.ts: "updateRules - RAC"

  • unskipped in [Security Solution] Unskip remaining Jest tests from RAC rules migration #122677

• plugins/security_solution/server/lib/detection_engine/signals/signal_rule_alert_type.test.ts (should be removed)

• plugins/security_solution/server/lib/detection_engine/signals/threshold/find_threshold_signals.test.ts: "findThresholdSignals"

  • unskipped in [Security Solution][RAC][Cypress] Unskip some tests #117596

• plugins/security_solution/server/search_strategy/security_solution/factory/hosts/details/query.host_details.dsl.test.ts: "buildHostDetailsQuery"

  • unskipped in [Security Solution][RAC][Cypress] Unskip some tests #117596

• plugins/security_solution/cypress/integration/timelines/data_providers.spec.ts: "timeline data providers"

Additional issues

• Review assertions that were removed (severity, risk_score, etc.)
  • Added back in [Security Solution] Add back severity and riskScore assertions for EQL alerts #122954
  • Also see [Security Solution] Severity and Risk Score is not displayed on the alerts timeline view #119340

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[madirey]

Related PRs:

• [Security Solutions] Unskips tests and adds additional flake resistance #116469
• [Security Solution] Security RAC migration follow up bug fixes #116386
• [Security Solution][RAC] Fixes Threshold Rule functionality for post-rule-migration 8.0 #117571

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-threat-hunting-cases (Feature:Cases)

[madirey]

Still need to address the removed assertions. In progress.