-
Notifications
You must be signed in to change notification settings - Fork 392
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[windows] Add Windows AppLocker Data Stream (Packaged app-Deployment) #7393
[windows] Add Windows AppLocker Data Stream (Packaged app-Deployment) #7393
Conversation
…ithub.com/nicpenning/integrations into windows-applocker-packaged-app-deployment
This should be ready for testing. Please advise! |
...ment/_dev/test/pipeline/test-events-microsoft-windows-applocker-packaged-app-deployment.json
Outdated
Show resolved
Hide resolved
packages/windows/data_stream/applocker_packaged_app_deployment/agent/stream/httpjson.yml.hbs
Show resolved
Hide resolved
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
packages/windows/data_stream/applocker_packaged_app_deployment/manifest.yml
Outdated
Show resolved
Hide resolved
/test |
🌐 Coverage report
|
…/elasticsearch/ingest_pipeline/default.yml Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
…/elasticsearch/ingest_pipeline/default.yml Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
…/elasticsearch/ingest_pipeline/default.yml Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
…/elasticsearch/ingest_pipeline/default.yml Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
…/manifest.yml Co-authored-by: Dan Kortschak <90160302+efd6@users.noreply.github.com>
/test |
Cleaned up null terminations, please test. |
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
...dows/data_stream/applocker_packaged_app_deployment/elasticsearch/ingest_pipeline/default.yml
Outdated
Show resolved
Hide resolved
Pinging @elastic/security-external-integrations (Team:Security-External Integrations) |
All findings corrected. Please test! |
/test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks
Package windows - 1.31.0 containing this change is available at https://epr.elastic.co/search?package=windows |
What does this PR do?
Adding the Microsoft Windows AppLocker Packaged app-Deployment channel to the Windows Integration
Resolves Part of - #6979
Checklist
changelog.yml
file.