Hello!
I'm wondering if it is possible to add an arbitrary ECS value to a response.  I've poked around through the docs, but it wasn't immediately clear how that might be done.  I did try:
addResponseAction(AllRule(), SetECSAction('0.0.0.0/0', '::/0'))
But SetECSAction() is only for queries, not responses.
Thanks!
Casey