From 737a4fe177a59af716e4937492060ccc0b17107b Mon Sep 17 00:00:00 2001 From: yasta5 <112320333+yasta5@users.noreply.github.com> Date: Mon, 26 Feb 2024 17:11:37 +0200 Subject: [PATCH] Refactor product parsing rule ms graph (#33049) * Change the product value of in the parsing rule. * Added release note. * Bump pack from version MicrosoftGraphSecurity to 2.2.10. --------- Co-authored-by: Content Bot --- .../MicrosoftGraphSecurity/MicrosoftGraphSecurity.xif | 2 +- Packs/MicrosoftGraphSecurity/ReleaseNotes/2_2_10.md | 3 +++ Packs/MicrosoftGraphSecurity/pack_metadata.json | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) create mode 100644 Packs/MicrosoftGraphSecurity/ReleaseNotes/2_2_10.md diff --git a/Packs/MicrosoftGraphSecurity/ParsingRules/MicrosoftGraphSecurity/MicrosoftGraphSecurity.xif b/Packs/MicrosoftGraphSecurity/ParsingRules/MicrosoftGraphSecurity/MicrosoftGraphSecurity.xif index 4a7bbbc4798b..ab106c9d12fe 100644 --- a/Packs/MicrosoftGraphSecurity/ParsingRules/MicrosoftGraphSecurity/MicrosoftGraphSecurity.xif +++ b/Packs/MicrosoftGraphSecurity/ParsingRules/MicrosoftGraphSecurity/MicrosoftGraphSecurity.xif @@ -1,3 +1,3 @@ -[INGEST:vendor="msft", product="graph_security_alerts", target_dataset="msft_graph_security_alerts_raw", no_hit=keep] +[INGEST:vendor="msft", product="Graph Security Alerts", target_dataset="msft_graph_security_alerts_raw", no_hit=keep] filter to_string(createdDateTime) ~= "\d{4}\-\d{2}\-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?Z" | alter _time = parse_timestamp("%Y-%m-%dT%H:%M:%E*SZ", to_string(createdDateTime)); \ No newline at end of file diff --git a/Packs/MicrosoftGraphSecurity/ReleaseNotes/2_2_10.md b/Packs/MicrosoftGraphSecurity/ReleaseNotes/2_2_10.md new file mode 100644 index 000000000000..946bd107aae0 --- /dev/null +++ b/Packs/MicrosoftGraphSecurity/ReleaseNotes/2_2_10.md @@ -0,0 +1,3 @@ +#### Parsing Rules +##### Microsoft Graph Security Parsing Rules +Fixed an issue with the product name. \ No newline at end of file diff --git a/Packs/MicrosoftGraphSecurity/pack_metadata.json b/Packs/MicrosoftGraphSecurity/pack_metadata.json index 4d5be5550c33..3075994a1060 100644 --- a/Packs/MicrosoftGraphSecurity/pack_metadata.json +++ b/Packs/MicrosoftGraphSecurity/pack_metadata.json @@ -2,7 +2,7 @@ "name": "Microsoft Graph Security", "description": "Unified gateway to security insights - all from a unified Microsoft Graph\n Security API.", "support": "xsoar", - "currentVersion": "2.2.9", + "currentVersion": "2.2.10", "author": "Cortex XSOAR", "url": "https://www.paloaltonetworks.com/cortex", "email": "",