[abnormal_security] Add Agentless Deployment

[mohitjha-elastic]

Proposed commit message

abnormal_security: add agentless deployment

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

• Clone integrations repo.
• Install the elastic package locally.
• Start the elastic stack using the elastic package.
• Move to integrations/packages/abnormal_security directory.
• Run the following command to run tests.

elastic-package test -v

Related issues

• Closes [abnormal_security] Add Agentless Deployment Support #17538

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[github-actions]

Vale Linting Results

Summary: 6 suggestions found

💡 Suggestions (6)

File	Line	Rule	Message
packages/abnormal_security/_dev/build/docs/README.md	5	Elastic.WordChoice	Consider using 'atypical, not typical' instead of 'Abnormal', unless the term is in the UI.
packages/abnormal_security/_dev/build/docs/README.md	5	Elastic.WordChoice	Consider using 'misuse' instead of 'Abuse', unless the term is in the UI.
packages/abnormal_security/_dev/build/docs/README.md	14	Elastic.WordChoice	Consider using 'atypical, not typical' instead of 'Abnormal', unless the term is in the UI.
packages/abnormal_security/docs/README.md	5	Elastic.WordChoice	Consider using 'atypical, not typical' instead of 'Abnormal', unless the term is in the UI.
packages/abnormal_security/docs/README.md	5	Elastic.WordChoice	Consider using 'misuse' instead of 'Abuse', unless the term is in the UI.
packages/abnormal_security/docs/README.md	14	Elastic.WordChoice	Consider using 'atypical, not typical' instead of 'Abnormal', unless the term is in the UI.

---

The Vale linter checks documentation changes against the Elastic Docs style guide.

To use Vale locally or report issues, refer to Elastic style guide for Vale.

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

Package abnormal_security 👍(2) 💚(1) 💔(3)

Expand to view

Data stream	Previous EPS	New EPS	Diff (%)	Result
ai_security_mailbox	3731.34	2421.31	-1310.03 (-35.11%)	💔
ai_security_mailbox_not_analyzed	10869.57	6896.55	-3973.02 (-36.55%)	💔
case	13513.51	10000	-3513.51 (-26%)	💔

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: d57f3bd

cc @mohitjha-elastic

[elastic-vault-github-plugin-prod]

Package abnormal_security - 1.14.0 containing this change is available at https://epr.elastic.co/package/abnormal_security/1.14.0/