Terrance DeJesus
f43bf99698
* [New Rule] GitHub Actions Workflow Injection Blocked Fixes #5431 * adjusts MITRE ATT&CK mappings * adjusting file name * updating GitHub integration schema; fixed MITRE mappings * revert manifests / schemas to main * added dynamic github fields to non-ecs file * Update rules/integrations/github/initial_access_github_actions_workflow_injection_blocked.toml Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com> * Update rules/integrations/github/initial_access_github_actions_workflow_injection_blocked.toml Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com> * Update rules/integrations/github/initial_access_github_actions_workflow_injection_blocked.toml Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com> * changed github actor ID reference --------- Co-authored-by: Samirbous <64742097+Samirbous@users.noreply.github.com> Co-authored-by: Ruben Groenewoud <78494512+Aegrah@users.noreply.github.com>