Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ECS] Update SEI packages to ECS 8.10 (Part 3) #7919

Merged
merged 34 commits into from Sep 22, 2023

Conversation

kgeller
Copy link
Contributor

@kgeller kgeller commented Sep 21, 2023

What does this PR do?

Updates the following SEI packages to ECS version 8.10:

  • m365_defender
  • mattermost
  • microsoft_defender_cloud
  • microsoft_dhcp
  • microsoft_exchange_online_message_trace
  • mimecast
  • modsecurity
  • mysql_enterprise
  • netflow
  • netscout
  • netskope
  • network_traffic
  • o365
  • osquery
  • panw
  • panw_cortex_xdr
  • pulse_connect_secure
  • qnap_nas
  • radware
  • rapid7_insightvm
  • santa
  • sentinel_one
  • sentinel_one_cloud_funnel
  • snort
  • snyk
  • sonicwall_firewall
  • sophos
  • sophos_central
  • squid
  • suricata
  • symantec_endpoint
  • sysmon_linux
  • system_audit

Changes generated by:

go install github.com/andrewkroh/go-examples/elastic-package-changelog@main
go run github.com/andrewkroh/go-examples/ecs-update@main -owner elastic/security-external-integrations -ecs-version=8.10.0 -ecs-git-ref=v8.10.0 -pr 7919 packages/<PACKAGE>

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Related issues

ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/m365_defender
@kgeller kgeller self-assigned this Sep 21, 2023
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mattermost
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_defender_cloud
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_dhcp
…@v8.10.0

ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/microsoft_exchange_online_message_trace
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mimecast
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/modsecurity
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/mysql_enterprise
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netflow
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netscout
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/netskope
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/network_traffic
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/o365
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/osquery
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/panw
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/panw_cortex_xdr
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/pulse_connect_secure
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/qnap_nas
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/radware
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/rapid7_insightvm
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/santa
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sentinel_one
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sentinel_one_cloud_funnel
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/snort
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/snyk
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sonicwall_firewall
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sophos
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/sophos_central
ECS version in build manifest changed from git@v8.9.0 to git@v8.10.0. The set
ecs.version processor in pipelines was changed 8.10.0. Previously the pipeline
was setting version 8.9.0. The ecs.version in sample_event.json files was
changed to 8.10.0. Previously sample_event.json files contained 8.9.0.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@v0.0.0-20230920173207-c70ab516eb52 -ecs-version=8.10.0 -ecs-git-ref=git@v8.10.0 -pr=7919 packages/squid
@elasticmachine
Copy link

Package microsoft_dhcp - 1.21.0 containing this change is available at https://epr.elastic.co/search?package=microsoft_dhcp

@elasticmachine
Copy link

Package microsoft_exchange_online_message_trace - 1.13.0 containing this change is available at https://epr.elastic.co/search?package=microsoft_exchange_online_message_trace

@elasticmachine
Copy link

Package mimecast - 1.18.0 containing this change is available at https://epr.elastic.co/search?package=mimecast

@elasticmachine
Copy link

Package modsecurity - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=modsecurity

@elasticmachine
Copy link

Package mysql_enterprise - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=mysql_enterprise

@elasticmachine
Copy link

Package netflow - 2.15.0 containing this change is available at https://epr.elastic.co/search?package=netflow

@elasticmachine
Copy link

Package netscout - 0.18.0 containing this change is available at https://epr.elastic.co/search?package=netscout

@elasticmachine
Copy link

Package netskope - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=netskope

@elasticmachine
Copy link

Package network_traffic - 1.25.0 containing this change is available at https://epr.elastic.co/search?package=network_traffic

@elasticmachine
Copy link

Package o365 - 1.24.0 containing this change is available at https://epr.elastic.co/search?package=o365

@elasticmachine
Copy link

Package osquery - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=osquery

@elasticmachine
Copy link

Package panw - 3.17.0 containing this change is available at https://epr.elastic.co/search?package=panw

@elasticmachine
Copy link

Package panw_cortex_xdr - 1.21.0 containing this change is available at https://epr.elastic.co/search?package=panw_cortex_xdr

@elasticmachine
Copy link

Package pulse_connect_secure - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=pulse_connect_secure

@elasticmachine
Copy link

Package qnap_nas - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=qnap_nas

@elasticmachine
Copy link

Package radware - 0.17.0 containing this change is available at https://epr.elastic.co/search?package=radware

@elasticmachine
Copy link

Package rapid7_insightvm - 1.5.0 containing this change is available at https://epr.elastic.co/search?package=rapid7_insightvm

@elasticmachine
Copy link

Package santa - 3.14.0 containing this change is available at https://epr.elastic.co/search?package=santa

@elasticmachine
Copy link

Package sentinel_one - 1.14.0 containing this change is available at https://epr.elastic.co/search?package=sentinel_one

@elasticmachine
Copy link

Package sentinel_one_cloud_funnel - 0.6.0 containing this change is available at https://epr.elastic.co/search?package=sentinel_one_cloud_funnel

@elasticmachine
Copy link

Package snort - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=snort

@elasticmachine
Copy link

Package snyk - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=snyk

@elasticmachine
Copy link

Package sonicwall_firewall - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=sonicwall_firewall

@elasticmachine
Copy link

Package sophos - 3.4.0 containing this change is available at https://epr.elastic.co/search?package=sophos

@elasticmachine
Copy link

Package sophos_central - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=sophos_central

@elasticmachine
Copy link

Package squid - 0.18.0 containing this change is available at https://epr.elastic.co/search?package=squid

@elasticmachine
Copy link

Package suricata - 2.17.0 containing this change is available at https://epr.elastic.co/search?package=suricata

@elasticmachine
Copy link

Package symantec_endpoint - 2.13.0 containing this change is available at https://epr.elastic.co/search?package=symantec_endpoint

@elasticmachine
Copy link

Package sysmon_linux - 1.4.0 containing this change is available at https://epr.elastic.co/search?package=sysmon_linux

@elasticmachine
Copy link

Package system_audit - 1.9.0 containing this change is available at https://epr.elastic.co/search?package=system_audit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants