Skip to content

Cheatsheets and help topics reference non-existent 'rule' commands instead of 'dr' #237

@lc-cbot

Description

@lc-cbot

Bug Description

The inline help topics and cheatsheets (in help_topics.py and discovery.py) reference commands that don't exist in the CLI. Specifically, they reference limacharlie rule list, limacharlie rule create, limacharlie rule update, etc. — but the actual commands are under the dr noun (limacharlie dr list, limacharlie dr set, etc.).

Similarly, fp create --name is referenced but the actual command is fp set --key.

Steps to Reproduce

limacharlie help cheatsheet --name detection-engineering
limacharlie help cheatsheet --name common-operations
limacharlie help topic d\&r-rules

All three output commands like:

limacharlie rule list
limacharlie rule create --name my-rule --detect '...' --respond '...'
limacharlie rule update --name proc-detect ...
limacharlie fp create --name suppress-benign ...

None of these commands exist. Running them produces Error: No such command 'rule'.

Affected Files

  • limacharlie/help_topics.pyHELP_TOPICS["d&r-rules"], HELP_TOPICS["detections"], HELP_TOPICS["bexpr"], HELP_TOPICS["extensions"], HELP_TOPICS["sync"], CHEATSHEETS["common-operations"], CHEATSHEETS["detection-engineering"]
  • limacharlie/discovery.pyPROFILES["detection_engineering"]["commands"] list

Correct Commands

Referenced (wrong) Actual command
limacharlie rule list limacharlie dr list
limacharlie rule get limacharlie dr get
limacharlie rule create limacharlie dr set
limacharlie rule update limacharlie dr set
limacharlie rule delete limacharlie dr delete
limacharlie rule test limacharlie dr test
limacharlie rule replay limacharlie dr replay
limacharlie rule validate limacharlie dr validate
limacharlie rule export limacharlie dr export
limacharlie rule import limacharlie dr import
limacharlie fp create limacharlie fp set
--name flag --key flag

Impact

Confusing for new users who rely on --ai-help, cheatsheets, and help topics for command discovery — they'll get No such command errors for every D&R rule operation.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions