Skip to content

[FR] NON_DATASET_PACKAGE list & Data Source tag for Auditd_manager #3430

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 7 commits into from
Feb 19, 2024
Merged

[FR] NON_DATASET_PACKAGE list & Data Source tag for Auditd_manager #3430

Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
588c28e
[FR] Add Auditd_Manager to NON_DATASET_PACKAGE
Aegrah Feb 6, 2024
2da8a73
Changed alphabetical order
Aegrah Feb 6, 2024
c6dc7df
Merge branch 'main' into FR-auditd_manager-tag_and_exception
Aegrah Feb 6, 2024
dc28a84
Merge branch 'main' into FR-auditd_manager-tag_and_exception
Mikaayenson Feb 6, 2024
fb7d97c
Merge branch 'main' into FR-auditd_manager-tag_and_exception
Mikaayenson Feb 8, 2024
302e512
Merge branch 'main' into FR-auditd_manager-tag_and_exception
terrancedejesus Feb 13, 2024
ed315a6
Merge branch 'main' into FR-auditd_manager-tag_and_exception
Aegrah Feb 19, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion detection_rules/schemas/definitions.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
"allow_sample": (Version.parse('8.6.0'), None),
"elasticsearch_validate_optional_fields": (Version.parse('7.16.0'), None)
}
NON_DATASET_PACKAGES = ['apm', 'endpoint', 'system', 'windows', 'cloud_defend', 'network_traffic']
NON_DATASET_PACKAGES = ['apm', 'auditd_manager', 'cloud_defend', 'endpoint', 'network_traffic', 'system', 'windows']
NON_PUBLIC_FIELDS = {
"related_integrations": (Version.parse('8.3.0'), None),
"required_fields": (Version.parse('8.3.0'), None),
Expand Down Expand Up @@ -68,6 +68,7 @@
EXPECTED_RULE_TAGS = [
'Data Source: Active Directory',
'Data Source: Amazon Web Services',
'Data Source: Auditd Manager',
'Data Source: AWS',
'Data Source: APM',
'Data Source: Azure',
Expand Down