Skip to content

Commit 606b5ca

Browse files
Remove PII sample values from UEBABehaviorsAnalysisWorkbook
Replaced hardcoded sample PII values with empty strings: - AWS IAM ARN - Incident time timestamp - Time window values (24h and 12h)
1 parent cfaf2b4 commit 606b5ca

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

Solutions/UEBA Essentials/Workbooks/UEBABehaviorsAnalysisWorkbook.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -288,7 +288,7 @@
288288
"type": 1,
289289
"description": "Comma-separated list of entity values from the selected incident",
290290
"isRequired": false,
291-
"value": "\"arn:aws:iam::648887187133:role/aws-service-role/eks.amazonaws.com/AWSServiceRoleForAmazonEKS\"",
291+
"value": "",
292292
"key": "incident-entities-param"
293293
},
294294
{
@@ -299,7 +299,7 @@
299299
"type": 1,
300300
"description": "DateTime of the incident (e.g., 2026-01-08T12:00:00Z)",
301301
"isRequired": false,
302-
"value": "2026-01-11T12:00:00Z",
302+
"value": "",
303303
"key": "incident-time-param"
304304
},
305305
{
@@ -309,7 +309,7 @@
309309
"label": "Hours Before",
310310
"type": 1,
311311
"isRequired": true,
312-
"value": "24h",
312+
"value": "",
313313
"key": "window-before-param"
314314
},
315315
{
@@ -319,7 +319,7 @@
319319
"label": "Hours After",
320320
"type": 1,
321321
"isRequired": true,
322-
"value": "12h",
322+
"value": "",
323323
"key": "window-after-param"
324324
}
325325
],

0 commit comments

Comments
 (0)