[Security Solution] Security AI Prompts

[stephmilovic]

Proposed commit message

Integration for Security AI Prompts

WHAT

This PR introduces a beta integration for Security AI Prompts, which provides pre-configured AI-driven security prompts in the Elastic Security solution. These prompts enhance automated threat detection and investigation workflows.

Users do not need to install the integration manually—it is automatically installed when they visit the Security Solution in Kibana.

For developers maintaining the integration, the prompts are generated in the Kibana repo and must be manually copied into this package when updates occur.

Requires elastic/package-spec#871

WHY

This enhancement streamlines AI-driven security assistance within Elastic Security, making it easier for analysts to leverage AI-generated insights. The automated installation removes friction for users, while the structured update process ensures prompt consistency across releases.

• https://github.com/elastic/security-team/issues/11196

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• Ensure the generated prompts are correctly formatted and copied into the integration package.
• Verify that the prompts appear correctly in Elastic Assistant after installation.

How to test this PR locally

Developer Flow (Updating Prompts)

1. In the Kibana repository, generate the Security AI Prompts:

   cd x-pack/solutions/security/plugins/elastic_assistant
   yarn generate-security-ai-prompts

2. Copy the generated prompt files into the package:

   cd packages/security_ai_prompts/kibana/security_ai_prompt
   rm ./*.json
   cp $KIBANA_HOME/target/security_ai_prompts/*.json .

3. Bump the version in the integration, and build the integration locally with:

   elastic-package lint && elastic-package build && elastic-package stack down && elastic-package stack up -d -v --services package-registry.

4. Verify that the updated prompts are correctly reflected in Kibana.

User Flow (No Setup Required)

1. Open Kibana Security Solution and navigate to Elastic Assistant.
2. Confirm that Security AI Prompts are available for use.

Screenshots

Kibana PR

Once this integrations PR is merged, we can move forward with the Kibana PR: elastic/kibana#216106

[elasticmachine]

💔 Build Failed

• Buildkite Build
• Commit: 38fd144

Failed CI Steps

• Check integrations couchdb
• Check integrations mysql
• Check integrations security_ai_prompts

History

• 💔 Build #23911 failed f014097
• 💔 Build #23910 failed 7411f4c

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

Package crowdstrike 👍(3) 💚(0) 💔(2)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
falcon	7042.25	4566.21	-2476.04 (-35.16%)	💔
host	2801.12	2083.33	-717.79 (-25.63%)	💔

To see the full report comment with /test benchmark fullreport

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube