Skip to content

Cheatsheets and help topics reference non-existent 'rule' commands instead of 'dr' #237

Description

@lc-cbot

Bug Description

The inline help topics and cheatsheets (in help_topics.py and discovery.py) reference commands that don't exist in the CLI. Specifically, they reference limacharlie rule list, limacharlie rule create, limacharlie rule update, etc. — but the actual commands are under the dr noun (limacharlie dr list, limacharlie dr set, etc.).

Similarly, fp create --name is referenced but the actual command is fp set --key.

Steps to Reproduce

limacharlie help cheatsheet --name detection-engineering
limacharlie help cheatsheet --name common-operations
limacharlie help topic d\&r-rules

All three output commands like:

limacharlie rule list
limacharlie rule create --name my-rule --detect '...' --respond '...'
limacharlie rule update --name proc-detect ...
limacharlie fp create --name suppress-benign ...

None of these commands exist. Running them produces Error: No such command 'rule'.

Affected Files

  • limacharlie/help_topics.py — HELP_TOPICS["d&r-rules"], HELP_TOPICS["detections"], HELP_TOPICS["bexpr"], HELP_TOPICS["extensions"], HELP_TOPICS["sync"], CHEATSHEETS["common-operations"], CHEATSHEETS["detection-engineering"]
  • limacharlie/discovery.py — PROFILES["detection_engineering"]["commands"] list

Correct Commands

Referenced (wrong) Actual command
limacharlie rule list limacharlie dr list
limacharlie rule get limacharlie dr get
limacharlie rule create limacharlie dr set
limacharlie rule update limacharlie dr set
limacharlie rule delete limacharlie dr delete
limacharlie rule test limacharlie dr test
limacharlie rule replay limacharlie dr replay
limacharlie rule validate limacharlie dr validate
limacharlie rule export limacharlie dr export
limacharlie rule import limacharlie dr import
limacharlie fp create limacharlie fp set
--name flag --key flag

Impact

Confusing for new users who rely on --ai-help, cheatsheets, and help topics for command discovery — they'll get No such command errors for every D&R rule operation.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions