Refresh UEBA package docs

[jmcarlock]

Proposed commit message

Refreshed the documentation for UEBA integration packages to clarify and help address incoming questions. The following packages were updated:

• DGA
• LotL (ProblemChild)
• Beaconing
• DED
• LMD

Changes include:

• Links to all public facing blogs were added for additional context.
• Added step-by-step installation instructions at the top of each readme.
• Added anything that was missing for installation, such as how to use the enrichment policies for DGA/LotL.
• The order of instructions is now consistent with how users will install packages.

A draft of these changes was reviewed by @susan-shu-c and @sodhikirti07.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs. These packages do not collect metrics/logs
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Author's Checklist

• Review installation instructions.

How to test this PR locally

• Tested all packages working locally with EP.

Related issues

• https://github.com/elastic/security-ml/issues/399

[sodhikirti07]

Overall, looks great! Just two minor comments:

• Add <VERSION> instead of the current version, it'll keep us updating the versions everytime we make a change.
• For consistency, add image for beaconing detection rules as well.

[susan-shu-c]

Thanks for updating these docs!

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 6f7fb46

History

• 💚 Build #11523 succeeded c5d67c0
• 💚 Build #11215 succeeded 6127e2d
• 💚 Build #11178 succeeded c078a1d
• 💚 Build #11171 succeeded 014f372
• 💚 Build #11161 succeeded c137be9

cc @jmcarlock

[elastic-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[elasticmachine]

Package beaconing - 1.2.1 containing this change is available at https://epr.elastic.co/search?package=beaconing

[elasticmachine]

Package ded - 2.1.2 containing this change is available at https://epr.elastic.co/search?package=ded

[elasticmachine]

Package dga - 2.0.2 containing this change is available at https://epr.elastic.co/search?package=dga

[elasticmachine]

Package lmd - 2.1.3 containing this change is available at https://epr.elastic.co/search?package=lmd

[elasticmachine]

Package problemchild - 2.1.3 containing this change is available at https://epr.elastic.co/search?package=problemchild