[Security Solution] remove group from AV workflow insight value (#214327)

## Summary

Removes group from the incompatible antivirus workflow insight type
value.

Resolves:
- https://github.com/elastic/kibana/issues/213681


### Checklist

- [x] [Unit or functional
tests](https://www.elastic.co/guide/en/kibana/master/development-tests.html)
were updated or added to match the most common scenarios
This commit is contained in:
Joey F. Poon 2025-03-13 23:56:14 +09:00 committed by GitHub
parent 9f2e07f2de
commit 448fda4111
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 2 deletions

View file

@ -98,7 +98,7 @@ describe('buildIncompatibleAntivirusWorkflowInsights', () => {
type: ActionType.Refreshed,
timestamp: expect.any(moment),
},
value: `AVGAntivirus /Applications/AVGAntivirus.app/Contents/Backend/services/com.avg.activity${
value: `/Applications/AVGAntivirus.app/Contents/Backend/services/com.avg.activity${
signerValue ? ` ${signerValue}` : ''
}`,
remediation: {

View file

@ -101,7 +101,7 @@ export async function buildIncompatibleAntivirusWorkflowInsights(
type: ActionType.Refreshed,
timestamp: currentTime,
},
value: `${defendInsight.group} ${filePath}${signatureValue ? ` ${signatureValue}` : ''}`,
value: `${filePath}${signatureValue ? ` ${signatureValue}` : ''}`,
metadata: {
notes: {
llm_model: apiConfig.model ?? '',