[text-auditor] Batch fix clear user-facing typo families in O365 and Check Point text

[github-actions]

Text Improvements

The following user-facing text issues were found in the repository. Each is a low-effort fix.

1. Typo family: upto → up to in O365 metrics sync help text (4 occurrences)

Current text: ...can take upto 48h or more to be available...

Suggested fix: ...can take up to 48h or more to be available...

Why: upto is a clear misspelling in user-visible configuration/help text.

Occurrences:

• packages/o365_metrics/data_stream/groups_activity_group_detail/manifest.yml (line 41)
• packages/o365_metrics/data_stream/viva_engage_groups_activity_group_detail/manifest.yml (line 41)
• packages/o365_metrics/data_stream/onedrive_usage_account_detail/manifest.yml (line 41)
• packages/o365_metrics/data_stream/teams_user_activity_user_detail/manifest.yml (line 41)

2. Typo family: Extention → Extension in Check Point Harmony Endpoint field text (2 occurrences)

Current text: Browser Extention version

Suggested fix: Browser Extension version

Why: Extention is a clear misspelling in user-facing field descriptions/docs.

Occurrences:

• packages/checkpoint_harmony_endpoint/data_stream/zerophishing/fields/fields.yml (line 51)
• packages/checkpoint_harmony_endpoint/docs/README.md (line 1244)

Suggested Actions

• Replace upto with up to in all four listed O365 metrics manifest descriptions.
• Replace Extention with Extension in both listed Check Point Harmony Endpoint occurrences.

---

What is this? | From workflow: Text Auditor

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

• expires on Apr 24, 2026, 10:37 AM UTC

[kcreddy]

To be closed by #18520

[infra-vault-gh-plugin-prod]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)