Update kql validation nuget to include Security Incident as part of the build in tables (#3127)

* c

* c

Co-authored-by: Offir Shvartz <ofshvart@microsoft.com>
This commit is contained in:
Offir Shvartz 2021-09-29 14:51:40 +03:00 коммит произвёл GitHub
Родитель 56e906a5c1
Коммит bdf622b995
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
4 изменённых файлов: 1 добавлений и 127 удалений

Просмотреть файл

@ -1,126 +0,0 @@
{
"Name": "SecurityIncident",
"Properties": [
{
"Name": "TenantId",
"Type": "string"
},
{
"Name": "TimeGenerated",
"Type": "datetime"
},
{
"Name": "IncidentName",
"Type": "string"
},
{
"Name": "Title",
"Type": "string"
},
{
"Name": "Description",
"Type": "string"
},
{
"Name": "Severity",
"Type": "string"
},
{
"Name": "Status",
"Type": "string"
},
{
"Name": "Classification",
"Type": "string"
},
{
"Name": "ClassificationComment",
"Type": "string"
},
{
"Name": "ClassificationReason",
"Type": "string"
},
{
"Name": "Owner",
"Type": "dynamic"
},
{
"Name": "ProviderName",
"Type": "string"
},
{
"Name": "ProviderIncidentId",
"Type": "string"
},
{
"Name": "FirstActivityTime",
"Type": "datetime"
},
{
"Name": "LastActivityTime",
"Type": "datetime"
},
{
"Name": "FirstModifiedTime",
"Type": "datetime"
},
{
"Name": "LastModifiedTime",
"Type": "datetime"
},
{
"Name": "CreatedTime",
"Type": "datetime"
},
{
"Name": "ClosedTime",
"Type": "datetime"
},
{
"Name": "IncidentNumber",
"Type": "int"
},
{
"Name": "RelatedAnalyticRuleIds",
"Type": "dynamic"
},
{
"Name": "AlertIds",
"Type": "dynamic"
},
{
"Name": "BookmarkIds",
"Type": "dynamic"
},
{
"Name": "Comments",
"Type": "dynamic"
},
{
"Name": "Labels",
"Type": "dynamic"
},
{
"Name": "IncidentUrl",
"Type": "string"
},
{
"Name": "AdditionalData",
"Type": "dynamic"
},
{
"Name": "ModifiedBy",
"Type": "string"
},
{
"Name": "SourceSystem",
"Type": "string"
},
{
"Name": "Type",
"Type": "string"
}
]
}

Просмотреть файл

@ -12,7 +12,7 @@
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<PackageReference Include="YamlDotNet" Version="6.0.0" />
<PackageReference Include="Microsoft.Azure.Sentinel.KustoServices" Version="2.1.0" />
<PackageReference Include="Microsoft.Azure.Sentinel.KustoServices" Version="2.2.0" />
</ItemGroup>
</Project>

Двоичный файл не отображается.

Двоичный файл не отображается.