security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updating non-ecs-schema to match content on main

Browse Source
This commit is contained in:
Mika Ayenson
2022-09-21 13:22:20 -04:00
parent bafab880bb
commit 514df3656d
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detection_rules/etc/non-ecs-schema.json
+7 -1
View File
@@ -43,6 +43,8 @@
"PrivilegeList": "keyword",
"AuthenticationPackageName" : "keyword",
"TargetUserSid" : "keyword",
"DnsHostName" : "keyword",
"LogonProcessName": "keyword",
"DnsHostName" : "keyword",
"TaskName": "keyword",
"Status": "keyword"
@@ -83,6 +85,10 @@
"kubernetes.audit.requestObject.spec.volumes.hostPath.path": "keyword",
"kubernetes.audit.requestObject.spec.type": "keyword",
"kubernetes.audit.requestObject.rules.resources": "keyword",
"kubernetes.audit.requestObject.rules.verb": "keyword"
"kubernetes.audit.requestObject.rules.verb": "keyword",
"kubernetes.audit.objectRef.namespace": "keyword",
"kubernetes.audit.objectRef.serviceAccountName": "keyword",
"kubernetes.audit.requestObject.spec.serviceAccountName": "keyword",
"kubernetes.audit.responseStatus.reason": "keyword"
}
}