Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Prismalayoutrulefix #32306

Merged
merged 2 commits into from Jan 18, 2024
Merged

Prismalayoutrulefix #32306

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1f884f1
fix
ArikDay Jan 18, 2024
aa7d585
rn
ArikDay Jan 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
112 changes: 58 additions & 54 deletions Packs/PrismaCloud/LayoutRules/Prisma_Cloud_V2.json
View file
Open in desktop
Expand Up @@ -5,61 +5,65 @@
"rule_name": "Prisma Cloud V2 Layout Rule",
"alerts_filter": {
"filter": {
"OR": [
"AND": [
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AWS CloudTrail Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AWS EC2 Instance Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AWS IAM Policy Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure AKS Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure Network Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure SQL Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure Storage Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "GCP Compute Engine Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "GCP Kubernetes Engine Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Prisma Cloud - VM Alert Prioritization"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Prisma Cloud"
"OR": [
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AWS CloudTrail Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AWS EC2 Instance Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "AWS IAM Policy Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure AKS Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure Network Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure SQL Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Azure Storage Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "GCP Compute Engine Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "GCP Kubernetes Engine Misconfiguration"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Prisma Cloud - VM Alert Prioritization"
},
{
"SEARCH_FIELD": "alert_type",
"SEARCH_TYPE": "EQ",
"SEARCH_VALUE": "Prisma Cloud"
}
]
}
]
}
Expand Down
6 changes: 6 additions & 0 deletions Packs/PrismaCloud/ReleaseNotes/4_2_17.md
View file
Open in desktop
@@ -0,0 +1,6 @@

#### Layout Rules

##### Prisma Cloud V2 Layout Rule

Fixed the rule structure.
2 changes: 1 addition & 1 deletion Packs/PrismaCloud/pack_metadata.json
View file
Open in desktop
Expand Up @@ -2,7 +2,7 @@
"name": "Prisma Cloud by Palo Alto Networks",
"description": "Automate and unify security incident response across your cloud environments, while still giving a degree of control to dedicated cloud teams.",
"support": "xsoar",
"currentVersion": "4.2.16",
"currentVersion": "4.2.17",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down