Samirbous 5e0fb4a63e [Tuning] Add logs-panw.panos index to Network rules (#4089) ...

* [Tuning] Add logs-panw.panos index to Network rules

https://github.com/elastic/detection-rules/issues/3998

This PR adds to the PANOS traffic index `.ds-logs-panw.panos-default-*` to the network rules using fields that are compatible.

* add tag and integration

* Update command_and_control_fin7_c2_behavior.toml

* Build Manifest and Schema for panw integration

* Update definitions.py

* Update definitions.py

* Fix definitions declaration

---------

Co-authored-by: Shashank K S <Shashank.Suryanarayana@elastic.co>

2024-09-19 08:01:44 +01:00

..

api_schemas

Refresh ECS, Beats manifest and schemas (#3993)

2024-08-20 20:45:20 +05:30

beats_schemas

Refresh ECS, Beats manifest and schemas (#3993)

2024-08-20 20:45:20 +05:30

ecs_schemas

Refresh ECS, Beats manifest and schemas (#3993)

2024-08-20 20:45:20 +05:30

endgame_schemas

Updated ECS mappings from keyword to wildcard (#2518)

2023-02-07 09:43:19 -05:00

endpoint_schemas

[FR] Add Support for Multi-Fields and Validation in Rules (#2882)

2023-06-28 20:35:33 -04:00

__init__.py

Update package and install process (#1948)

2022-12-08 15:49:49 -05:00

_config.yaml

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

attack-crosswalk.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

attack-technique-redirects.json

Refresh MITRE Attack v15.1.0 (#3725)

2024-06-04 20:14:58 +05:30

attack-v15.1.0.json.gz

Refresh MITRE Attack v15.1.0 (#3725)

2024-06-04 20:14:58 +05:30

commit-and-push.sh

Update commit-and-push.sh (#2640)

2023-03-09 17:31:19 -05:00

deprecated_rules.json

Lock versions for releases: 8.10,8.11,8.12,8.13,8.14,8.15 (#3926)

2024-07-25 18:38:08 +05:30

downloadable_updates.json

Lock versions for releases: 8.3,8.4,8.5,8.6,8.7,8.8,8.9,8.10,8.11,8.12 (#3431)

2024-02-06 14:48:33 -05:00

example_test_config.yaml

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

integration-manifests.json.gz

[Tuning] Add logs-panw.panos index to Network rules (#4089)

2024-09-19 08:01:44 +01:00

integration-schemas.json.gz

[Tuning] Add logs-panw.panos index to Network rules (#4089)

2024-09-19 08:01:44 +01:00

lock-multiple.sh

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

non-ecs-schema.json

[New Rule] Okta Public Client App OAuth Token Request with Client Credentials (#4074)

2024-09-13 14:57:49 -04:00

packages.yaml

Prep for next release 8.16 (#3919)

2024-07-24 11:19:56 -04:00

rule_template_typosquatting_domain.json

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

rule-mapping.yaml

[FR] Normalize yml ext to yaml (#3675)

2024-05-15 15:18:39 -05:00

security-logo-color-64px.svg

Move etc under detection_rules (#1885)

2022-05-02 10:11:21 -04:00

stack-schema-map.yaml

Refresh ECS, Beats manifest and schemas (#3993)

2024-08-20 20:45:20 +05:30

test_cli.bash

Support toml lint for investigate transforms (#4066)

2024-09-11 20:45:36 +05:30

test_remote_cli.bash

[DaC] Beta Release (#3889)

2024-08-06 18:07:12 -04:00

test_toml.json

Support toml lint for investigate transforms (#4066)

2024-09-11 20:45:36 +05:30

version.lock.json

Lock versions for releases: 8.10,8.11,8.12,8.13,8.14,8.15 (#4082)

2024-09-16 21:43:16 +05:30