Skip to content

Field mappings + Alert Details Widget #7

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
Jun 29, 2020
Merged

Field mappings + Alert Details Widget #7

merged 8 commits into from
Jun 29, 2020

Conversation

antazoey
Copy link

@antazoey antazoey commented Jun 24, 2020

  • Adds new fields
  • Makes some logic more functional (but nothing changed there).

Big note on this -- some of the default mapping required to get this to work are not included.... in server 6.0.0, they are, but it seems like it's pretty common for analysts to come in and mess all that up anyway, if that makes sense.

I can explain how to get the mappings to work in the Confluence page.

@antazoey antazoey marked this pull request as ready for review June 24, 2020 21:59
@antazoey antazoey marked this pull request as draft June 25, 2020 14:08
@antazoey antazoey changed the title Field mappings Field mappings + Alert Details Widget Jun 25, 2020
@antazoey antazoey marked this pull request as ready for review June 25, 2020 14:27
@antazoey
Copy link
Author

antazoey commented Jun 26, 2020

This one might require a demo - @kiran-chaudhary saw it a little bit in that last demo I did.. I will attach a photo

@antazoey
Copy link
Author


Screen Shot 2020-06-26 at 16 24 26

@antazoey
Copy link
Author

antazoey commented Jun 26, 2020

In the pic above, you will see the "Code42 Alert Details" section - that is really all that changed, besides something to make the File Events table work.

Copy link

@alanag13 alanag13 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Even though I don't have much context here I'm willing to approve this since it seems to be basically just configuration and i figure PAN will tell you if something is wrong here once we go to merge with them.

@antazoey antazoey merged commit 09270bb into master Jun 29, 2020
@antazoey antazoey deleted the field-mappings branch June 29, 2020 19:38
jdullum pushed a commit that referenced this pull request Oct 12, 2023
* Updated Docs

* added RNs
ceciliastevens pushed a commit that referenced this pull request Dec 4, 2024
* Updated docker image to demisto/python3:3.11.10.113941. PR batch #4/7 (demisto#36995)

Co-authored-by: root <root@1e2de18e0cc3>

* Updated docker image to demisto/python3:3.11.10.113941. PR batch #3/7 (demisto#36994)

Co-authored-by: root <root@1e2de18e0cc3>

* Updated docker image to demisto/python3:3.11.10.113941. PR batch #7/7 (demisto#36998)

Co-authored-by: root <root@1e2de18e0cc3>

* demisto/python3:3.11.10.113941 | 0-100 | PR batch #2/7 (demisto#36993)

* Updated docker image to demisto/python3:3.11.10.113941. PR batch #2/7

* Update IPNetwork.yml

---------

Co-authored-by: root <root@1e2de18e0cc3>
Co-authored-by: inbalapt1 <[email protected]>

* Updated docker image to demisto/python3:3.11.10.113941. PR batch #1/7 (demisto#36992)

Co-authored-by: root <root@1e2de18e0cc3>

* demisto/python3:3.11.10.113941 | 0-100 | PR batch #6/7 (demisto#36997)

* Updated docker image to demisto/python3:3.11.10.113941. PR batch #6/7

* fix UTC

* remove paloaltonetworks_iot

---------

Co-authored-by: root <root@1e2de18e0cc3>
Co-authored-by: [email protected] <[email protected]>

* update release notes

* Bump pack from version MicrosoftExchangeOnline to 1.5.13.

---------

Co-authored-by: content-bot <[email protected]>
Co-authored-by: root <root@1e2de18e0cc3>
Co-authored-by: Content Bot <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants