What Changed
Removed the KqlValidationsTests CustomFunction definition for ASimAlertEventBitdefenderGravityZone to resolve a validation error where the function name referred to multiple variables after the actual ASIM parser was merged in PRs #13299 and #13330.
Parser Impact
This is a test infrastructure cleanup with no operational impact. The actual ASIM AlertEvent parser for Bitdefender GravityZone remains functional — only the temporary test validation shim has been removed to prevent CI validation conflicts.
No change to normalised field names or filter logic — safe for existing detections using this parser.
Affected Files
.script/tests/KqlvalidationsTests/CustomFunctions/ASimAlertEventBitdefenderGravityZone.json