Skip to content

Commit 09a5996

Browse files
eyalpalodorschw
authored and
xsoar-bot
committed
Xsiam layout rule (demisto#23481)
* poetry * revert * debug logs added * revert * added layout rule * Update Tests/scripts/collect_tests/constants.py Co-authored-by: dorschw <[email protected]> * CR fixes * bug fix * removed from SIEM RULES OBJECT * added code pan run to secrets ignore * release notes --------- Co-authored-by: dorschw <[email protected]>
1 parent de2441a commit 09a5996

File tree

18 files changed

+178
-8
lines changed

18 files changed

+178
-8
lines changed

‎Packs/AccessInvestigation/LayoutRules/Access.json

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"rule_id": "Access_layout_rule",
3+
"layout_id": "Access",
4+
"description": "",
5+
"rule_name": "Access Layout Rule",
6+
"alerts_filter": {
7+
"filter": {
8+
"AND": [
9+
{
10+
"SEARCH_FIELD": "alert_type",
11+
"SEARCH_TYPE": "EQ",
12+
"SEARCH_VALUE": "Access"
13+
}
14+
]
15+
}
16+
},
17+
"fromVersion": "6.10.0"
18+
}

‎Packs/AccessInvestigation/ReleaseNotes/1_2_3.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
2+
#### Layout Rules
3+
##### New: Access Layout Rule
4+
- Added support for layouts and layout rules in XSIAM.

‎Packs/AccessInvestigation/pack_metadata.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
"name": "Access Investigation",
33
"description": "This Content Pack automates response to unauthorised access incidents and contains customer access incident views and layouts to aid investigation.",
44
"support": "xsoar",
5-
"currentVersion": "1.2.2",
5+
"currentVersion": "1.2.3",
66
"author": "Cortex XSOAR",
77
"url": "https://www.paloaltonetworks.com/cortex",
88
"email": "",
@@ -37,4 +37,4 @@
3737
"xsoar",
3838
"marketplacev2"
3939
]
40-
}
40+
}

‎Packs/CommonTypes/LayoutRules/Indicator_Feed.json

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"rule_id": "Indicator_Feed_layout_rule",
3+
"layout_id": "Indicator Feed",
4+
"description": "",
5+
"rule_name": "Indicator Feed Layout Rule",
6+
"alerts_filter": {
7+
"filter": {
8+
"AND": [
9+
{
10+
"SEARCH_FIELD": "alert_type",
11+
"SEARCH_TYPE": "EQ",
12+
"SEARCH_VALUE": "Indicator Feed"
13+
}
14+
]
15+
}
16+
},
17+
"fromVersion": "6.10.0"
18+
}

‎Packs/CommonTypes/LayoutRules/Vulnerability.json

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"rule_id": "Vulnerability_layout_rule",
3+
"layout_id": "Vulnerability",
4+
"description": "",
5+
"rule_name": "Vulnerability Layout Rule",
6+
"alerts_filter": {
7+
"filter": {
8+
"AND": [
9+
{
10+
"SEARCH_FIELD": "alert_type",
11+
"SEARCH_TYPE": "EQ",
12+
"SEARCH_VALUE": "Vulnerability"
13+
}
14+
]
15+
}
16+
},
17+
"fromVersion": "6.10.0"
18+
}

‎Packs/CommonTypes/ReleaseNotes/3_3_49.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
2+
#### Layout Rules
3+
##### New: Vulnerability Layout Rule
4+
- Added support for layouts and layout rules in XSIAM.
5+
##### New: Indicator Feed Layout Rule
6+
- Added support for layouts and layout rules in XSIAM.

‎Packs/CommonTypes/pack_metadata.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
"name": "Common Types",
33
"description": "This Content Pack will get you up and running in no-time and provide you with the most commonly used incident & indicator fields and types.",
44
"support": "xsoar",
5-
"currentVersion": "3.3.48",
5+
"currentVersion": "3.3.49",
66
"author": "Cortex XSOAR",
77
"url": "https://www.paloaltonetworks.com/cortex",
88
"email": "",

‎Packs/CrisisManagement/LayoutRules/Employee_Health_Check.json

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
{
2+
"rule_id": "Employee_Health_Check_layout_rule",
3+
"layout_id": "Employee Health Check",
4+
"description": "",
5+
"rule_name": "Employee Health Check Layout Rule",
6+
"alerts_filter": {
7+
"filter": {
8+
"AND": [
9+
{
10+
"SEARCH_FIELD": "alert_type",
11+
"SEARCH_TYPE": "EQ",
12+
"SEARCH_VALUE": "Employee Health Check"
13+
}
14+
]
15+
}
16+
},
17+
"fromVersion": "6.10.0"
18+
}

‎Packs/CrisisManagement/ReleaseNotes/1_2_3.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
2+
#### Layout Rules
3+
##### New: Employee Health Check Layout Rule
4+
- Added support for layouts and layout rules in XSIAM.

‎Packs/CrisisManagement/pack_metadata.json

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,13 @@
22
"name": "Crisis Management",
33
"description": "This Content Pack helps you automate data collection and crisis event communications such as monitoring remote employee health and safety well being.",
44
"support": "xsoar",
5-
"currentVersion": "1.2.2",
5+
"currentVersion": "1.2.3",
66
"author": "Cortex XSOAR",
77
"url": "https://www.paloaltonetworks.com/cortex",
88
"email": "",
9-
"videos": ["https://www.youtube.com/watch?v=J6DcD5y5B_U"],
9+
"videos": [
10+
"https://www.youtube.com/watch?v=J6DcD5y5B_U"
11+
],
1012
"categories": [
1113
"Case Management"
1214
],

0 commit comments

Comments
 (0)