Skip to content

Commit 7d6ed5d

Browse files
v-atulyadavv-atulyadav
authored
Merge pull request #11703 from idoshabi07/jamf-protect-packaging-solution
adding solution for Jamf Push connector
2 parents b228a2f + c52857f commit 7d6ed5d

19 files changed

+4536
-930
lines changed

‎.script/tests/KqlvalidationsTests/CustomTables/jamfprotectalerts_CL.json‎

Lines changed: 225 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,225 @@
1+
{
2+
"Name": "jamfprotectalerts_CL",
3+
"Properties": [
4+
{
5+
"name": "input",
6+
"type": "dynamic"
7+
},
8+
{
9+
"name": "TimeGenerated",
10+
"type": "datetime"
11+
},
12+
{
13+
"name": "EventVendor",
14+
"type": "string"
15+
},
16+
{
17+
"name": "EventProduct",
18+
"type": "string"
19+
},
20+
{
21+
"name": "EventProductVersion",
22+
"type": "dynamic"
23+
},
24+
{
25+
"name": "EventSeverity",
26+
"type": "string"
27+
},
28+
{
29+
"name": "EventOriginalType",
30+
"type": "dynamic"
31+
},
32+
{
33+
"name": "EventOriginalUid",
34+
"type": "dynamic"
35+
},
36+
{
37+
"name": "EventType",
38+
"type": "string"
39+
},
40+
{
41+
"name": "EventResult",
42+
"type": "string"
43+
},
44+
{
45+
"name": "EventMessage",
46+
"type": "dynamic"
47+
},
48+
{
49+
"name": "EventResultMessage",
50+
"type": "dynamic"
51+
},
52+
{
53+
"name": "TargetHostname",
54+
"type": "dynamic"
55+
},
56+
{
57+
"name": "DvcHostname",
58+
"type": "dynamic"
59+
},
60+
{
61+
"name": "DvcSerial",
62+
"type": "dynamic"
63+
},
64+
{
65+
"name": "DvcIpAddr",
66+
"type": "dynamic"
67+
},
68+
{
69+
"name": "DvcId",
70+
"type": "dynamic"
71+
},
72+
{
73+
"name": "DvcOs",
74+
"type": "string"
75+
},
76+
{
77+
"name": "DvcOsVersion",
78+
"type": "dynamic"
79+
},
80+
{
81+
"name": "SrcDeviceType",
82+
"type": "string"
83+
},
84+
{
85+
"name": "ProcessEventType",
86+
"type": "string"
87+
},
88+
{
89+
"name": "ProcessEventSubType",
90+
"type": "string"
91+
},
92+
{
93+
"name": "ActingProcessName",
94+
"type": "string"
95+
},
96+
{
97+
"name": "ActingProcessId",
98+
"type": "real"
99+
},
100+
{
101+
"name": "ActingProcessGuid",
102+
"type": "string"
103+
},
104+
{
105+
"name": "ParentProcessName",
106+
"type": "dynamic"
107+
},
108+
{
109+
"name": "ParentProcessId",
110+
"type": "real"
111+
},
112+
{
113+
"name": "ParentProcessGuid",
114+
"type": "string"
115+
},
116+
{
117+
"name": "TargetProcessName",
118+
"type": "dynamic"
119+
},
120+
{
121+
"name": "TargetProcessId",
122+
"type": "dynamic"
123+
},
124+
{
125+
"name": "TargetProcessGuid",
126+
"type": "dynamic"
127+
},
128+
{
129+
"name": "TargetProcessSHA1",
130+
"type": "string"
131+
},
132+
{
133+
"name": "TargetProcessSHA256",
134+
"type": "string"
135+
},
136+
{
137+
"name": "TargetProcessCommandLine",
138+
"type": "dynamic"
139+
},
140+
{
141+
"name": "TargetProcessCurrentDirectory",
142+
"type": "string"
143+
},
144+
{
145+
"name": "TargetProcessStatusCode",
146+
"type": "real"
147+
},
148+
{
149+
"name": "TargetFilePath",
150+
"type": "dynamic"
151+
},
152+
{
153+
"name": "TargetFileSHA1",
154+
"type": "dynamic"
155+
},
156+
{
157+
"name": "TargetFileSHA256",
158+
"type": "dynamic"
159+
},
160+
{
161+
"name": "TargetFileSize",
162+
"type": "dynamic"
163+
},
164+
{
165+
"name": "TargetFileSigningInfoMessage",
166+
"type": "dynamic"
167+
},
168+
{
169+
"name": "TargetFileSignerType",
170+
"type": "string"
171+
},
172+
{
173+
"name": "TargetFileSigningTeamID",
174+
"type": "dynamic"
175+
},
176+
{
177+
"name": "TargetFileIsDownload",
178+
"type": "boolean"
179+
},
180+
{
181+
"name": "TargetFileIsAppBundle",
182+
"type": "boolean"
183+
},
184+
{
185+
"name": "TargetFileIsDirectory",
186+
"type": "boolean"
187+
},
188+
{
189+
"name": "TargetFileIsScreenshot",
190+
"type": "boolean"
191+
},
192+
{
193+
"name": "TargetFileExtendedAttributes",
194+
"type": "dynamic"
195+
},
196+
{
197+
"name": "TargetBinaryFilePath",
198+
"type": "dynamic"
199+
},
200+
{
201+
"name": "TargetBinarySHA1",
202+
"type": "dynamic"
203+
},
204+
{
205+
"name": "TargetBinarySHA256",
206+
"type": "dynamic"
207+
},
208+
{
209+
"name": "TargetBinarySigningInfoMessage",
210+
"type": "dynamic"
211+
},
212+
{
213+
"name": "TargetbinarySignerType",
214+
"type": "string"
215+
},
216+
{
217+
"name": "TargetBinarySigningTeamID",
218+
"type": "dynamic"
219+
},
220+
{
221+
"name": "TargetBinarySigningAppID",
222+
"type": "dynamic"
223+
}
224+
]
225+
}

0 commit comments

Comments
 (0)