Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Modeling/Parsing Rules YMLs Alignment #38259

Open
wants to merge 23 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 8.2.0 # Will be updated with XSIAM version updates
id: Arista_Switch_Modeling_Rules
id: Arista_Switch_ModelingRule
name: Arista Switch Modeling Rules
rules: ''
schema: ''
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
id: Arista_Switch_Parsing_Rules
id: Arista_Switch_ParsingRule
name: Arista Switch Parsing Rules
fromversion: 8.2.0
tags: [Arista, Switch, EOS]
Expand Down
12 changes: 12 additions & 0 deletions Packs/AristaSwitch/ReleaseNotes/1_0_2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@

#### Modeling Rules

##### Arista Switch Modeling Rules

- Updated the YML config file for backend compatibility.

#### Parsing Rules

##### Arista Switch Parsing Rules

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/AristaSwitch/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Arista Switch",
"description": "Modeling & Parsing Rules for Arista EOS Switch Events Logs.",
"support": "xsoar",
"currentVersion": "1.0.1",
"currentVersion": "1.0.2",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
4 changes: 2 additions & 2 deletions Packs/Auditd/ParsingRules/Auditd/Auditd.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: UnixAuditd Parsing Rule
id: UnixAuditd Parsing Rule
id: UnixAuditd_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
samples: ''
samples: ''
6 changes: 6 additions & 0 deletions Packs/Auditd/ReleaseNotes/1_0_3.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### UnixAuditd Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/Auditd/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Auditd",
"description": "Auditd Modeling Rules and Parsing Rules Pack.",
"support": "xsoar",
"currentVersion": "1.0.2",
"currentVersion": "1.0.3",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 6.8.0
id: azure_events_hub_modeling_rule
id: Azure_Events_Hub_ModelingRule
name: Azure Events Hub Modeling Rule
rules: ''
schema: ''
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: Azure Events Hub Modeling Rule
id: azure_events_hub_modeling_rule
name: Microsoft Azure Events Hub Parsing Rule
id: Microsoft_Azure_Events_Hub_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
12 changes: 12 additions & 0 deletions Packs/AzureEventsHub/ReleaseNotes/1_0_7.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@

#### Modeling Rules

##### Azure Events Hub Modeling Rule

- Updated the YML config file for backend compatibility.

#### Parsing Rules

##### Microsoft Azure Events Hub Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/AzureEventsHub/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
"description": "Deprecated. Modeling Rules for the Microsoft Azure Events Hub logs collector",
"support": "xsoar",
"hidden": true,
"currentVersion": "1.0.6",
"currentVersion": "1.0.7",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@ id: BeyondTrust_PRA_ModelingRule
name: BeyondTrust Privileged Remote Access Modeling Rule
rules: ''
schema: ''
tags: BeyondTrust
tags: BeyondTrust
6 changes: 6 additions & 0 deletions Packs/BeyondTrustPrivilegedRemoteAccess/ReleaseNotes/1_0_1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### BeyondTrust Privileged Remote Access Modeling Rule

- Updated the YML config file for backend compatibility.
12 changes: 10 additions & 2 deletions Packs/BeyondTrustPrivilegedRemoteAccess/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Beyond Trust Privileged Remote Access",
"description": "BeyondTrust Privileged Remote Access controls, manages, and audits privileged accounts and credentials.",
"support": "xsoar",
"currentVersion": "1.0.0",
"currentVersion": "1.0.1",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand All @@ -11,7 +11,15 @@
],
"tags": [],
"useCases": [],
"keywords": ["BeyondTrust", "Beyond Trust", "Beyond", "Remote Access", "Privileged Remote Access", "PRA", "Privileged"],
"keywords": [
"BeyondTrust",
"Beyond Trust",
"Beyond",
"Remote Access",
"Privileged Remote Access",
"PRA",
"Privileged"
],
"marketplaces": [
"marketplacev2"
]
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@ id: BeyondTrust_Remote_Support_ModelingRule
name: BeyondTrust Remote Support Modeling Rule
rules: ''
schema: ''
tags: BeyondTrust
tags: BeyondTrust
6 changes: 6 additions & 0 deletions Packs/BeyondTrustRemoteSupport/ReleaseNotes/1_0_1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### BeyondTrust Remote Support Modeling Rule

- Updated the YML config file for backend compatibility.
8 changes: 6 additions & 2 deletions Packs/BeyondTrustRemoteSupport/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Beyond Trust Remote Support",
"description": "enables support organizations to access and support nearly any remote computer or mobile device.",
"support": "xsoar",
"currentVersion": "1.0.0",
"currentVersion": "1.0.1",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand All @@ -11,7 +11,11 @@
],
"tags": [],
"useCases": [],
"keywords": ["Remote Support", "Remote" , "Bomgar"],
"keywords": [
"Remote Support",
"Remote",
"Bomgar"
],
"marketplaces": [
"marketplacev2"
]
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@ name: BeyondTrust Password Safe Parsing Rule
fromversion: 8.4.0
tags: []
rules: ''
samples: ''
samples: ''
6 changes: 6 additions & 0 deletions Packs/BeyondTrust_Password_Safe/ReleaseNotes/1_1_8.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### BeyondTrust Password Safe Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/BeyondTrust_Password_Safe/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "BeyondTrust Password Safe",
"description": "Unified password and session management for seamless accountability and control over privileged accounts.",
"support": "xsoar",
"currentVersion": "1.1.7",
"currentVersion": "1.1.8",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
fromversion: 6.8.0
id: brocade_switch_modeling_rule
id: Brocade_Switch_ModelingRule
name: Brocade Switch Modeling Rule
rules: ''
schema: ''
tags: Brocade Switch
toversion: 6.9.9
toversion: 6.9.9
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: BrocadeSwitch Parsing Rule
id: BrocadeSwitch Parsing Rule
name: Brocade Switch Parsing Rule
id: Brocade_Switch_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
samples: ''
samples: ''
12 changes: 12 additions & 0 deletions Packs/BrocadeSwitch/ReleaseNotes/1_0_11.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@

#### Modeling Rules

##### Brocade Switch Modeling Rule

- Updated the YML config file for backend compatibility.

#### Parsing Rules

##### Brocade Switch Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/BrocadeSwitch/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Brocade Switch",
"description": "Modeling Rules for the Brocade Switch logs collector",
"support": "xsoar",
"currentVersion": "1.0.10",
"currentVersion": "1.0.11",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
fromversion: 6.8.0
id: checkpoint_firewall_collection
name: CheckPoint Firewall Collection
id: Check_Point_Firewall_ModelingRule
name: Check Point Firewall Modeling Rule
rules: ''
schema: ''
tags: CheckPoint Firewall Event Collection
toversion: 6.9.9
toversion: 6.9.9
6 changes: 6 additions & 0 deletions Packs/CheckpointFirewall/ReleaseNotes/2_3_26.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### Check Point Firewall Modeling Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/CheckpointFirewall/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Check Point Firewall",
"description": "Manage Check Point firewall via API",
"support": "xsoar",
"currentVersion": "2.3.25",
"currentVersion": "2.3.26",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
6 changes: 3 additions & 3 deletions Packs/CiscoASA/ParsingRules/CiscoASA/CiscoASA.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: CiscoASA Parsing Rule
id: CiscoASA Parsing Rule
name: Cisco ASA Parsing Rule
id: Cisco_ASA_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
samples: ''
samples: ''
6 changes: 6 additions & 0 deletions Packs/CiscoASA/ReleaseNotes/1_1_13.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### Cisco ASA Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/CiscoASA/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Cisco ASA",
"description": "Cisco Adaptive Security Appliance Software is the core operating system for the Cisco ASA Family. It delivers enterprise-class firewall capabilities for ASA devices.",
"support": "xsoar",
"currentVersion": "1.1.12",
"currentVersion": "1.1.13",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name: CiscoCatalyst Parsing Rule
id: CiscoCatalyst Parsing Rule
name: Cisco Catalyst Parsing Rule
id: Cisco_Catalyst_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
samples: ''
samples: ''
6 changes: 6 additions & 0 deletions Packs/CiscoCatalyst/ReleaseNotes/1_0_8.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### Cisco Catalyst Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/CiscoCatalyst/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Cisco Catalyst",
"description": "Cisco Catalyst switch",
"support": "xsoar",
"currentVersion": "1.0.7",
"currentVersion": "1.0.8",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
2 changes: 1 addition & 1 deletion Packs/CiscoSMA/ParsingRules/CiscoSMA/CiscoSMA.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: CiscoSMA Parsing Rule
id: CiscoSMA Parsing Rule
id: CiscoSMA_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
6 changes: 6 additions & 0 deletions Packs/CiscoSMA/ReleaseNotes/1_1_33.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### CiscoSMA Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/CiscoSMA/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "CiscoSMA",
"description": "The Security Management Appliance (SMA) is used to centralize services from Email Security Appliances (ESAs) and Web Security Appliances (WSAs).",
"support": "xsoar",
"currentVersion": "1.1.32",
"currentVersion": "1.1.33",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
fromversion: 6.10.0
id: Cisco_Stealthwatch
name: Cisco Stealthwatch
id: Cisco_Stealthwatch_ModelingRule
name: Cisco Stealthwatch Modeling Rule
rules: ''
schema: ''
tags: ''
tags: ''
6 changes: 6 additions & 0 deletions Packs/CiscoStealthwatch/ReleaseNotes/1_0_34.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### Cisco Stealthwatch Modeling Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/CiscoStealthwatch/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Cisco Secure Network Analytics (Stealthwatch)",
"description": "Cisco Secure Network Analytics (Stealthwatch) provides scalable visibility and security analytics.",
"support": "xsoar",
"currentVersion": "1.0.33",
"currentVersion": "1.0.34",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 8.2.0
id: Clearswift_DLP_Modeling_Rules
id: Clearswift_DLP_ModelingRule
name: Clearswift DLP Modeling Rules
rules: ''
schema: ''
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
id: Clearswift_DLP_Parsing_Rules
id: Clearswift_DLP_ParsingRule
name: Clearswift DLP Parsing Rules
fromversion: 8.2.0
tags: []
Expand Down
12 changes: 12 additions & 0 deletions Packs/ClearswiftDLP/ReleaseNotes/1_0_4.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@

#### Modeling Rules

##### Clearswift DLP Modeling Rules

- Updated the YML config file for backend compatibility.

#### Parsing Rules

##### Clearswift DLP Parsing Rules

- Updated the YML config file for backend compatibility.
Loading