Merge pull request #984 from Azure/YF_ExpansionWithUEBA
Fixed yaml declaration on input fields
This commit is contained in:
Коммит
869a9e03da
|
@ -4,6 +4,8 @@ Description: Hosts a given user performed interactive logon to for the first tim
|
|||
InputEntityType: Account
|
||||
InputFields:
|
||||
- Name
|
||||
- Sid
|
||||
- AadUserId
|
||||
OutputEntityTypes:
|
||||
- Host
|
||||
QueryPeriodBefore: 1d
|
||||
|
|
|
@ -4,6 +4,8 @@ Description: Hosts a given user performed remote logon to for the first time in
|
|||
InputEntityType: Account
|
||||
InputFields:
|
||||
- Name
|
||||
- Sid
|
||||
- AadUserId
|
||||
OutputEntityTypes:
|
||||
- Host
|
||||
QueryPeriodBefore: 1d
|
||||
|
|
|
@ -4,6 +4,8 @@ Description: Hosts a given user performed resource access to for the first time
|
|||
InputEntityType: Account
|
||||
InputFields:
|
||||
- Name
|
||||
- Sid
|
||||
- AadUserId
|
||||
OutputEntityTypes:
|
||||
- Host
|
||||
QueryPeriodBefore: 1d
|
||||
|
|
Загрузка…
Ссылка в новой задаче