Skip to content

Commit 64c5a6b

Browse files
fix issues
1 parent b726b0a commit 64c5a6b

17 files changed

+173
-180
lines changed

.script/tests/KqlvalidationsTests/CustomTables/CBS_BreachedCredentials_CL.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
{ "Name": "CBS_BreachedCredentials",
1+
{ "Name": "CBS_BreachedCredentials_CL",
22
"Properties":[
33
{
44
"Name": "TimeGenerated",

.script/tests/KqlvalidationsTests/CustomTables/CBS_CompromisedCards_CL.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
{ "Name": "CBS_CompromisedCards",
1+
{ "Name": "CBS_CompromisedCards_CL",
22
"Properties":[
33
{
44
"Name": "TimeGenerated",

.script/tests/KqlvalidationsTests/CustomTables/CBS_DomainInfringement.json renamed to .script/tests/KqlvalidationsTests/CustomTables/CBS_DomainInfringement_CL.json

Lines changed: 64 additions & 64 deletions
Original file line numberDiff line numberDiff line change
@@ -1,64 +1,64 @@
1-
{ "Name": "CBS_DomainInfringement",
2-
"Properties":[
3-
{
4-
"Name": "TimeGenerated",
5-
"Type": "datetime"
6-
},
7-
{
8-
"Name": "EventVendor",
9-
"Type": "string"
10-
},
11-
{
12-
"Name": "EventProduct",
13-
"Type": "string"
14-
},
15-
{
16-
"Name": "EventCategory",
17-
"Type": "string"
18-
},
19-
{
20-
"Name": "SourceConnector",
21-
"Type": "string"
22-
},
23-
{
24-
"Name": "Id",
25-
"Type": "string"
26-
},
27-
{
28-
"Name": "Subject",
29-
"Type": "string"
30-
},
31-
{
32-
"Name": "Remarks",
33-
"Type": "string"
34-
},
35-
{
36-
"Name": "ExternalLink",
37-
"Type": "string"
38-
},
39-
{
40-
"Name": "Severity",
41-
"Type": "string"
42-
},
43-
{
44-
"Name": "IncidentType",
45-
"Type": "string"
46-
},
47-
{
48-
"Name": "Status",
49-
"Type": "string"
50-
},
51-
{
52-
"Name": "IncidentStatus",
53-
"Type": "string"
54-
},
55-
{
56-
"Name": "Brand",
57-
"Type": "string"
58-
},
59-
{
60-
"Name": "RawPayload",
61-
"Type": "string"
62-
}
63-
]
64-
}
1+
{ "Name": "CBS_DomainInfringement_CL",
2+
"Properties":[
3+
{
4+
"Name": "TimeGenerated",
5+
"Type": "datetime"
6+
},
7+
{
8+
"Name": "EventVendor",
9+
"Type": "string"
10+
},
11+
{
12+
"Name": "EventProduct",
13+
"Type": "string"
14+
},
15+
{
16+
"Name": "EventCategory",
17+
"Type": "string"
18+
},
19+
{
20+
"Name": "SourceConnector",
21+
"Type": "string"
22+
},
23+
{
24+
"Name": "Id",
25+
"Type": "string"
26+
},
27+
{
28+
"Name": "Subject",
29+
"Type": "string"
30+
},
31+
{
32+
"Name": "Remarks",
33+
"Type": "string"
34+
},
35+
{
36+
"Name": "ExternalLink",
37+
"Type": "string"
38+
},
39+
{
40+
"Name": "Severity",
41+
"Type": "string"
42+
},
43+
{
44+
"Name": "IncidentType",
45+
"Type": "string"
46+
},
47+
{
48+
"Name": "Status",
49+
"Type": "string"
50+
},
51+
{
52+
"Name": "IncidentStatus",
53+
"Type": "string"
54+
},
55+
{
56+
"Name": "Brand",
57+
"Type": "string"
58+
},
59+
{
60+
"Name": "RawPayload",
61+
"Type": "string"
62+
}
63+
]
64+
}

.script/tests/KqlvalidationsTests/CustomTables/CBSLog.json renamed to .script/tests/KqlvalidationsTests/CustomTables/CBS_Log_CL.json

Lines changed: 76 additions & 76 deletions
Original file line numberDiff line numberDiff line change
@@ -1,76 +1,76 @@
1-
{ "Name": "CBSLog",
2-
"Properties":[
3-
{
4-
"Name": "TimeGenerated",
5-
"Type": "datetime"
6-
},
7-
{
8-
"Name": "EventVendor",
9-
"Type": "string"
10-
},
11-
{
12-
"Name": "EventProduct",
13-
"Type": "string"
14-
},
15-
{
16-
"Name": "SourceConnector",
17-
"Type": "string"
18-
},
19-
{
20-
"Name": "IncidentId",
21-
"Type": "string"
22-
},
23-
{
24-
"Name": "Subject",
25-
"Type": "string"
26-
},
27-
{
28-
"Name": "Severity",
29-
"Type": "string"
30-
},
31-
{
32-
"Name": "IncidentType",
33-
"Type": "string"
34-
},
35-
{
36-
"Name": "Class",
37-
"Type": "string"
38-
},
39-
{
40-
"Name": "Status",
41-
"Type": "string"
42-
},
43-
{
44-
"Name": "COA",
45-
"Type": "string"
46-
},
47-
{
48-
"Name": "Screenshots",
49-
"Type": "dynamic"
50-
},
51-
{
52-
"Name": "Remarks",
53-
"Type": "string"
54-
},
55-
{
56-
"Name": "ExternalLink",
57-
"Type": "string"
58-
},
59-
{
60-
"Name": "FirstSeen",
61-
"Type": "string"
62-
},
63-
{
64-
"Name": "LastSeen",
65-
"Type": "string"
66-
},
67-
{
68-
"Name": "Brand",
69-
"Type": "string"
70-
},
71-
{
72-
"Name": "RawPayload",
73-
"Type": "string"
74-
}
75-
]
76-
}
1+
{ "Name": "CBS_Log_CL",
2+
"Properties":[
3+
{
4+
"Name": "TimeGenerated",
5+
"Type": "datetime"
6+
},
7+
{
8+
"Name": "EventVendor",
9+
"Type": "string"
10+
},
11+
{
12+
"Name": "EventProduct",
13+
"Type": "string"
14+
},
15+
{
16+
"Name": "SourceConnector",
17+
"Type": "string"
18+
},
19+
{
20+
"Name": "IncidentId",
21+
"Type": "string"
22+
},
23+
{
24+
"Name": "Subject",
25+
"Type": "string"
26+
},
27+
{
28+
"Name": "Severity",
29+
"Type": "string"
30+
},
31+
{
32+
"Name": "IncidentType",
33+
"Type": "string"
34+
},
35+
{
36+
"Name": "Class",
37+
"Type": "string"
38+
},
39+
{
40+
"Name": "Status",
41+
"Type": "string"
42+
},
43+
{
44+
"Name": "COA",
45+
"Type": "string"
46+
},
47+
{
48+
"Name": "Screenshots",
49+
"Type": "dynamic"
50+
},
51+
{
52+
"Name": "Remarks",
53+
"Type": "string"
54+
},
55+
{
56+
"Name": "ExternalLink",
57+
"Type": "string"
58+
},
59+
{
60+
"Name": "FirstSeen",
61+
"Type": "string"
62+
},
63+
{
64+
"Name": "LastSeen",
65+
"Type": "string"
66+
},
67+
{
68+
"Name": "Brand",
69+
"Type": "string"
70+
},
71+
{
72+
"Name": "RawPayload",
73+
"Type": "string"
74+
}
75+
]
76+
}

.script/tests/KqlvalidationsTests/CustomTables/CBS_MalwareLogs_CL.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
{ "Name": "CBS_MalwareLogs",
1+
{ "Name": "CBS_MalwareLogs_CL",
22
"Properties":[
33
{
44
"Name": "TimeGenerated",

.script/tests/KqlvalidationsTests/CustomTables/CBS_SubdomainInfringement.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
{ "Name": "CBS_SubdomainInfringement",
1+
{ "Name": "CBS_SubdomainInfringement_CL",
22
"Properties":[
33
{
44
"Name": "TimeGenerated",

Solutions/CTM360/Analytic Rules/CBSAnyIssueDetected.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
id: b2c3d4e5-f6a7-48b9-c0d1-k2l3m4n5o6p7
1+
id: abe1a662-d00d-482e-aa68-9394622ae02e
22
name: CyberBlindSpot - Any Issue Detected
33
description: Generic alert that triggers when ANY CyberBlindSpot issue/incident is detected in the logs. Extracts nested metadata from RawPayload.
44
severity: Informational

Solutions/CTM360/Analytic Rules/HackerViewAnyIssueDetected.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
id: a1b2c3d4-e5f6-47g8-h9i0-j1k2l3m4n5o6
1+
id: abe1a663-d00d-482e-aa68-9394622ae03e
22
name: HackerView - Any Issue Detected
33
description: Generic alert that triggers when ANY HackerView issue/incident is detected in the logs. Extracts nested metadata from RawPayload.
44
severity: Informational

Solutions/CTM360/Package/3.0.4.zip

-46 Bytes
Binary file not shown.

0 commit comments

Comments
 (0)