Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
5 946 коммитов 3 369 Ветки 0 Теги 11 GiB
Граф коммитов

157 Коммитов

Автор SHA1 Сообщение Дата
dicolanl 7974737f08
Merge pull request #1929 from oshvartz/UpdateKustoNugetUpdtingAppServiceHTTPLogs 
Update kusto validation nuget  - update appServiceHttpLogs Schema
 2021-03-15 07:40:42 -07:00
Amit Bergman 7547869b29
Update DetectionTemplateSchemaValidationTests.cs 2021-03-14 13:09:47 +02:00
Amit Bergman 2c688ea494
Update DetectionTemplateSchemaValidationTests.cs 2021-03-14 12:54:06 +02:00
Amit Bergman 1e1193461c
Update DetectionTemplateSchemaValidationTests.cs 2021-03-14 12:22:45 +02:00
Offir Shvartz e0ef03ce91 update nuget 2021-03-14 09:38:51 +02:00
Offir Shvartz 19bded7ed7 c 2021-03-11 10:32:17 +02:00
v-jayakal d5edd79552
Merge pull request #1866 from Azure/feature/v-rucdu/PRValidationExtension 
Extending PR Validations to Solutions folder
 2021-03-07 20:36:12 -08:00
Shain e17013ac9f
Merge pull request #1841 from oshvartz/feature/AddKqlErrorLocations 
Add to Kql validation the location of the error on the query
 2021-03-07 14:12:59 -08:00
v-rucdu 177ee58c31 Reverting change for WorkbookMetadataValidation 2021-03-04 14:50:48 +05:30
v-rucdu 523d8b3d2e Extended PR Validations to Solutions folder 2021-03-03 18:35:50 +05:30
Pete Bryan fe18733f55 HAFNIUM Queries 2021-03-02 13:09:15 -08:00
Offir Shvartz 61999646b9 init 2021-03-02 11:30:11 +02:00
Shain ba77e804d9
Merge pull request #1815 from thmcelro/Ignite-2021-Azure-Storage 
Ignite 2021 Queries
 2021-02-28 19:25:55 -08:00
v-jayakal 52ff0bdb21
Merge pull request #1797 from socprime/box_data_conn 
Box Data Connector
 2021-02-25 10:45:28 -08:00
laithhisham d15b4098e0
added custom details to template model + validations (#1823) 
Add custom detailsto template model
Add validations for custom details
 2021-02-24 20:59:54 +02:00
Shain Wray (MSTIC) e8e259d0b7 Updating AttackTactics updated to inclusion of items that used to be in Pre-Attack - https://attack.mitre.org/tactics/enterprise/ 2021-02-23 10:44:07 -08:00
laithhisham 8b8b825ae4
Update kusto services nuget to 1.0.11 (#1810) 
* update kusto services nuget

* remove AzDevops duplicate table +fix nupkg
 2021-02-23 20:14:20 +02:00
v-jayakal 20f012c15c
Merge pull request #1679 from socprime/JiraAuditConnector 
Jira audit connector
 2021-02-22 22:47:40 -08:00
Shain Wray (MSTIC) f3b6e86bf2 Add in custom tables separately to see if it resolves the build issues for #1440 2021-02-22 11:10:33 -08:00
Thomas McElroy f234303732 Fixes 
- Fixing "min" to "m"
- Adding custom table JSON for StorageFileLogs and StorageBlobLogs
 2021-02-22 18:01:28 +00:00
Amit Bergman 90109cbaec
Update SkipStrcutreValidationsTemplates.json 2021-02-21 10:23:51 +02:00
Amit Bergman fa748e0541
Update SkipStrcutreValidationsTemplates.json 2021-02-21 09:59:51 +02:00
Amit Bergman 73f2879a34
Update SkipStrcutreValidationsTemplates.json 2021-02-21 09:56:55 +02:00
Amit Bergman 0b86d691cd
Update SkipStrcutreValidationsTemplates.json 2021-02-21 09:51:04 +02:00
Amit Bergman 73d5068f0f
Update SkipStrcutreValidationsTemplates.json 2021-02-21 09:47:33 +02:00
Vitalii Uslystyi 3bc41aba90 box data conn - added fields mapping 2021-02-19 13:22:25 +02:00
Shain 6f69f09f20
Merge pull request #1621 from cyberpion-yotam/cyberpion-detection 
Cyberpion detection
 2021-02-18 15:59:47 -08:00
Shain df3b5f6420
Merge pull request #1779 from Azure/pebryan/2021-2-4_ADOBuild 
Pebryan/2021 2 4 ado build
 2021-02-18 08:25:57 -08:00
Shain 5973fab14d
Merge pull request #1571 from socprime/new_rules_and_queries_for_cisco_and_pp 
New rules and queries for Cisco Umbrella, Cisco ISE and Proofpoint POD
 2021-02-17 16:04:03 -08:00
Shain 6bed35ae84
Merge pull request #1552 from acnccd/acn_cd_crowdstrike_analyticsrules01 
ACN_CD_CrowdStrikeFalcon_AnalyticsRules01
 2021-02-17 14:39:29 -08:00
Pete Bryan 6d321a0903 schema formatting 2021-02-17 07:55:12 -08:00
Pete Bryan d3f3ebe771 New custom schema 2021-02-17 07:46:10 -08:00
v-jayakal db6dc63b37
Merge pull request #1769 from Azure/feature/v-rucdu/SkipTemplatesFolder 
Skipping files under Templates folder
 2021-02-15 04:51:23 -08:00
v-jayakal 597526d9e5
Merge pull request #1614 from socprime/nginx_data_connector 
NGINX data connector
 2021-02-15 04:42:06 -08:00
v-rucdu dc8ac48571 Added warning instead of throwing exception 2021-02-15 13:57:56 +05:30
v-rucdu 983947fb78 Skipping files under Templates folder 2021-02-15 13:48:06 +05:30
laithhisham fbe8b107ba
updated kusto services nuget (#1767) 2021-02-14 16:56:02 +02:00
sagamzu ec4878599b
[PR validation] update Kusto NuGet version (#1745) 2021-02-10 10:18:19 +02:00
roabadie-microsoft 3b218745d5
Add workbook template test - check if template contains resource info (#1712) 
* Add workbook template test - check if template contains resource info
 2021-02-04 14:17:23 +02:00
Offir Shvartz 08dba8cb49
Merge pull request #1701 from oshvartz/feature/FixAsciiLastError 
Fix Ascii errors
 2021-02-02 17:23:04 +02:00
roabadie-microsoft fdbe1e300f
Add tests to workbook metadata validator (#1652) 
* Add tests to workbook metadata validator

* empty dependency format test file removed and is done using in json schema
 2021-02-02 11:31:13 +02:00
Offir Shvartz faf8872e8a a 2021-02-02 10:55:59 +02:00
Offir Shvartz ad6182840c Merge branch 'master' into feature/AddNonAsciiValidation 2021-02-01 17:56:03 +02:00
Vitalii Uslystyi 5cc8608ac2 Proofpoint POD rules - added table schema 2021-02-01 16:42:58 +02:00
Vitalii Uslystyi 066ac190cd Cisco ISE rules - added table schema 2021-02-01 16:42:44 +02:00
laithhisham 3ea7e0e4c1
Add identifier-level validation for new entity mappings in templates (#1680) 
* Add identifier-level validation for new entity mappings in templates

* cr fix
 2021-01-31 16:35:50 +02:00
v-rucdu acdcdff359 Merge branch 'master' into feature/v-admahe/CodeReviewAutomation 2021-01-29 19:31:30 +05:30
v-rucdu a6b28e3017
Merge branch 'master' into feature/CodeReviewAutomation 2021-01-29 19:05:39 +05:30
Alex Verbniak e8d0748cfb JiraAudit: test table 2021-01-28 16:47:02 +02:00
v-rucdu d1900f702d Updated fileTypeSuffixes 
Updated fileTypeSuffixes to accept all files under Logos folder
 2021-01-28 17:33:23 +05:30