Skip to content

Commit a279eff

Browse files
yedidyacohenpalojbabazadeh
authored andcommitted
Yc/carbon black/ciac 9132 (#35202)
* Existing commands migration to the new endpoints * cbd-find-processes polling command added * added cbd-find-observation-details polling command * new version all existing commands including polling commands * added validations for required args, and cleaning * device commands added * added docs string in client functions * added docs string to all comands * description file added * mapper updated to the new response format * docs and type ignore * update and set policy commands added * done * readme file added for all commands * Migration notes added * removed -dev * test file with all commands tests * fixed build * added RN and tests * pre-commit * pre commit * format * added release note and updated docker image * rewrite * handle priority_level in CamelCase arg * docs review * docs review * deleted unneeded duplicates * Update Packs/CarbonBlackDefense/ReleaseNotes/4_0_0.md Co-authored-by: JudithB <[email protected]> * format fixed --------- Co-authored-by: JudithB <[email protected]>
1 parent 4dac885 commit a279eff

9 files changed

+10883
-46
lines changed

Packs/CarbonBlackDefense/Classifiers/classifier-mapper-incoming-Carbon_Black_Endpoint_Standard_Incoming_Mapper.json

Lines changed: 8 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -10,116 +10,79 @@
1010
"Carbon Black Endpoint Standard": {
1111
"dontMapEventToLabels": true,
1212
"internalMapping": {
13-
"Alert Category": {
14-
"complex": null,
15-
"simple": "category"
16-
},
1713
"Alert ID": {
18-
"complex": null,
1914
"simple": "id"
2015
},
2116
"Carbon Black ES Alert Severity": {
22-
"complex": null,
2317
"simple": "severity"
2418
},
2519
"Carbon Black ES First Event Time": {
26-
"complex": null,
27-
"simple": "first_event_time"
20+
"simple": "first_event_timestamp"
2821
},
2922
"Carbon Black ES IOC Hit": {
30-
"complex": null,
3123
"simple": "ioc_hit"
3224
},
3325
"Carbon Black ES IOC Id": {
34-
"complex": null,
3526
"simple": "ioc_id"
3627
},
3728
"Carbon Black ES Last Event Time": {
38-
"complex": null,
39-
"simple": "last_event_time"
29+
"simple": "last_event_timestamp"
4030
},
4131
"Carbon Black ES Process Id": {
42-
"complex": null,
4332
"simple": "process_guid"
4433
},
4534
"Carbon Black ES Process Name": {
46-
"complex": null,
4735
"simple": "process_name"
4836
},
4937
"Carbon Black ES Report Name": {
50-
"complex": null,
5138
"simple": "report_name"
5239
},
5340
"Carbon Black ES Reputation": {
54-
"complex": null,
55-
"simple": "threat_cause_reputation"
41+
"simple": "process_reputation"
5642
},
5743
"Carbon Black ES Target Value": {
58-
"complex": null,
59-
"simple": "target_value"
60-
},
61-
"Carbon Black ES Threat Category": {
62-
"complex": null,
63-
"simple": "threat_cause_threat_category"
44+
"simple": "device_target_value"
6445
},
6546
"Carbon Black ES Threat Id": {
66-
"complex": null,
6747
"simple": "threat_id"
6848
},
69-
"Carbon Black ES Vector": {
70-
"complex": null,
71-
"simple": "threat_cause_vector"
72-
},
7349
"Changed": {
74-
"complex": null,
7550
"simple": "workflow.changed_by"
7651
},
7752
"Description": {
78-
"complex": null,
7953
"simple": "reason"
8054
},
8155
"Device Id": {
82-
"complex": null,
8356
"simple": "device_id"
8457
},
8558
"Device Name": {
86-
"complex": null,
8759
"simple": "device_name"
8860
},
8961
"Device Username": {
90-
"complex": null,
9162
"simple": "device_username"
9263
},
9364
"Last Update Time": {
94-
"complex": null,
95-
"simple": "last_update_time"
65+
"simple": "backend_update_timestamp"
9666
},
9767
"OS": {
98-
"complex": null,
9968
"simple": "device_os"
10069
},
10170
"OS Version": {
102-
"complex": null,
10371
"simple": "device_os_version"
10472
},
10573
"Policy ID": {
106-
"complex": null,
107-
"simple": "policy_id"
74+
"simple": "device_policy_id"
10875
},
10976
"Carbon Black ES Report ID": {
110-
"complex": null,
11177
"simple": "report_id"
11278
},
11379
"SHA256": {
114-
"complex": null,
115-
"simple": "threat_cause_actor_sha256"
80+
"simple": "process_sha256"
11681
},
11782
"State": {
118-
"complex": null,
119-
"simple": "workflow.state"
83+
"simple": "workflow.status"
12084
},
12185
"Tags": {
122-
"complex": null,
12386
"simple": "tags"
12487
}
12588
}

0 commit comments

Comments
 (0)