Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

xsiam-model-rule-schema-is-array-toggling-fix-1 #27702

Merged
Merged
Show file tree
Hide file tree
Changes from 9 commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
7eb5b22
xsiam-google-drive-model-rule-schema-is-array-fix
cweltPA Jun 25, 2023
0890aa6
xsiam-google-drive-model-rule-schema-is-array-fix-update-release-notes
cweltPA Jun 25, 2023
d0fceb9
xsiam-microsoft-defender-model-rule-schema-is-array-fix
cweltPA Jun 25, 2023
77c877d
xsiam-microsoft-defender-model-rule-schema-is-array-fix-update-releas…
cweltPA Jun 25, 2023
4444cad
xsiam-microsoftCloudAppSecurity-model-rule-schema-is-array-fix
cweltPA Jun 25, 2023
2203537
xsiam-microsoftCloudAppSecurity-model-rule-schema-is-array-fix-upd-re…
cweltPA Jun 25, 2023
7169bad
xsiam-microsoft--model-rule-schema-is-array-fix-upd-release-notes
cweltPA Jun 26, 2023
c5f8afd
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 27, 2023
ccdb21e
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 27, 2023
1b88fb1
xsiam-model-rule-sechema-toggle-is-array-fix1-upd-release-notes
cweltPA Jun 27, 2023
c803217
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 27, 2023
8ad86f2
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 28, 2023
ca0fe92
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 28, 2023
2961fba
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 28, 2023
fe7a9e7
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 28, 2023
49509a1
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 29, 2023
452beb2
xsiam-microsoftCloudAppSecurity-model-rule-outcome-incase-sensitivity
cweltPA Jun 29, 2023
3256a01
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jun 29, 2023
bec6dd4
Merged master into current branch.
Jul 1, 2023
5ffe8a8
Bump pack from version GoogleDrive to 1.2.35.
Jul 1, 2023
8d9846f
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jul 2, 2023
85d952f
Merge branch 'master' into xsiam-model-rule-schema-is-array-fix-1-goo…
cweltPA Jul 2, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 6.10.0
id: google_drive_modeling_rule
id: google_drive_ModelingRule
name: Google Drive Modeling Rule
rules: ''
schema: ''
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,27 +2,27 @@
"google_workspace_drive_raw": {
"events": {
"type": "string",
"is_array": true
"is_array": false
},
"ipAddress": {
"type": "string",
"is_array": false
},
"_product": {
"type": "string",
"is_array": true
"is_array": false
},
"_vendor": {
"type": "string",
"is_array": true
"is_array": false
},
"kind": {
"type": "string",
"is_array": true
"is_array": false
},
"actor": {
"type": "string",
"is_array": true
"is_array": false
}
}
}
2 changes: 1 addition & 1 deletion Packs/GoogleDrive/ParsingRules/GoogleDrive/GoogleDrive.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: GoogleDrive Parsing Rule
id: GoogleDrive Parsing Rule
id: GoogleDrive_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
15 changes: 15 additions & 0 deletions Packs/GoogleDrive/ReleaseNotes/1_2_34.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,15 @@

#### Modeling Rules

##### Google Drive Modeling Rule

Fixed an issue in the modeling rule schema metadata by toggling the **is_array** property from *true* to *false*.

<!-- >
#### Parsing Rules

##### GoogleDrive Parsing Rule

Updated the parsing rule ID according to the new verified convention.

-->
2 changes: 1 addition & 1 deletion Packs/GoogleDrive/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Google Drive",
"description": "Google Drive allows users to store files on their servers, synchronize files across devices, and share files. This integration helps you to create a new drive, query past activity and view change logs performed by the users, as well as list drives and files, and manage their permissions.",
"support": "xsoar",
"currentVersion": "1.2.33",
"currentVersion": "1.2.34",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
fromversion: 6.10.0
id: microsoft_defender_cloud_apps
name: Microsoft Defender Cloud Apps
id: microsoft_defender_cloud_apps_ModelingRule
name: Microsoft Defender Cloud Apps Modeling Rule
rules: ''
schema: ''
tags: microsoft
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@
},
"entities": {
"type": "string",
"is_array": true
"is_array": false
},
"severityValue": {
"type": "int",
Expand All @@ -66,7 +66,7 @@
},
"evidence": {
"type": "string",
"is_array": true
"is_array": false
}
}
}
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: MicrosoftCloudAppSecurity
id: MicrosoftCloudAppSecurity
name: Microsoft Cloud App Security Parsing Rule
id: MicrosoftCloudAppSecurityParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
14 changes: 14 additions & 0 deletions Packs/MicrosoftCloudAppSecurity/ReleaseNotes/2_1_33.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@

#### Modeling Rules

##### Microsoft Defender Cloud Apps Modeling Rule

Fixed an issue in the modeling rule schema metadata by toggling the **is_array** property from *true* to *false*.

<!-- >
#### Parsing Rules

##### Microsoft Cloud App Security Parsing Rule

Updated the parsing rule ID in the yml metadata config according to the new suffix convention requirement.
-->
2 changes: 1 addition & 1 deletion Packs/MicrosoftCloudAppSecurity/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Microsoft Defender for Cloud Apps",
"description": "Microsoft Cloud App Security Integration, a Cloud Access Security Broker that supports various deployment modes",
"support": "xsoar",
"currentVersion": "2.1.32",
"currentVersion": "2.1.33",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
fromversion: 6.10.0
id: microsoft_365_defender_event_collector
name: Microsoft 365 Defender Event Collector
id: microsoft_365_defender_event_collector_ModelingRule
name: Microsoft 365 Defender Event Collector Modeling Rule
rules: ''
schema: ''
tags: Microsoft 365 Defender
Original file line number Diff line number Diff line change
Expand Up @@ -50,11 +50,11 @@
},
"mitreTechniques": {
"type": "string",
"is_array": true
"is_array": false
},
"evidence": {
"type": "string",
"is_array": true
"is_array": false
}
}
}
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: MicrosoftDefenderAdvancedThreatProtection Parsing Rule
id: MicrosoftDefenderAdvancedThreatProtection Parsing Rule
name: Microsoft Defender Advanced Threat Protection Parsing Rule
id: Microsoft_DefenderAdvancedThreatProtection_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,16 @@

#### Modeling Rules

##### Microsoft 365 Defender Event Collector Modeling Rule

Fixed an issue in the modeling rule schema metadata by toggling the **is_array** property from *true* to *false*.


<!--
#### Parsing Rules

##### Microsoft Defender Advanced Threat Protection Parsing Rule

Updated the parsing rule ID in the metadata according to the new verified convention.

-->
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Microsoft Defender for Endpoint",
"description": "Microsoft Defender for Endpoint (previously Microsoft Defender Advanced Threat Protection (ATP)) is a unified platform for preventative protection, post-breach detection, automated investigation, and response.",
"support": "xsoar",
"currentVersion": "1.15.27",
"currentVersion": "1.15.28",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down