Skip to content

Commit

Permalink
Run Modeling/Parsing Rules YMLs Alignment fourth, fifth and six chunks (
Browse files Browse the repository at this point in the history
  • Loading branch information
AviShakuri authored Jan 29, 2025
1 parent 7c1dad0 commit 55c7666
Show file tree
Hide file tree
Showing 38 changed files with 116 additions and 32 deletions.
4 changes: 2 additions & 2 deletions Packs/FireEyeNX/ModelingRules/FireEyeNX/FireEyeNX.yml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
name: FireEye NX Modeling Rule
id: fireeye_nx_modeling_rule
id: FireEye_NX_ModelingRule
fromversion: 6.8.0
toversion: 6.9.9
tags: FireEye NX
rules: ''
schema: ''
schema: ''
6 changes: 6 additions & 0 deletions Packs/FireEyeNX/ReleaseNotes/1_1_38.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### FireEye NX Modeling Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/FireEyeNX/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "FireEye Network Security (NX)",
"description": "FireEye Network Security is an effective cyber threat protection solution that helps organizations minimize the risk of costly breaches by accurately detecting and immediately stopping advanced, targeted, and other evasive attacks hiding in Internet traffic.",
"support": "xsoar",
"currentVersion": "1.1.37",
"currentVersion": "1.1.38",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
4 changes: 2 additions & 2 deletions Packs/Forcepoint/ModelingRules/Forcepoint/Forcepoint.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
fromversion: 6.10.0
id: Forcepoint_NGFW
name: Forcepoint NGFW
id: Forcepoint_NGFW_ModelingRule
name: Forcepoint NGFW Modeling Rule
rules: ''
schema: ''
tags: ''
6 changes: 6 additions & 0 deletions Packs/Forcepoint/ReleaseNotes/1_0_14.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### Forcepoint NGFW Modeling Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/Forcepoint/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Forcepoint Web Security",
"description": "Advanced threat protection with added local management controls.",
"support": "xsoar",
"currentVersion": "1.0.13",
"currentVersion": "1.0.14",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 8.2.0
id: Forcepoint_Email_Security_Modeling_Rules
id: Forcepoint_Email_Security_ModelingRule
name: Forcepoint Email Security Modeling Rules
rules: ''
schema: ''
Expand Down
6 changes: 6 additions & 0 deletions Packs/ForcepointEmailSecurity/ReleaseNotes/1_0_2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### Forcepoint Email Security Modeling Rules

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/ForcepointEmailSecurity/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Forcepoint Email Security",
"description": "Provides protection and filtering capabilities of inbound and outbound traffic for email systems.",
"support": "xsoar",
"currentVersion": "1.0.1",
"currentVersion": "1.0.2",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
4 changes: 2 additions & 2 deletions Packs/FortiGate/ParsingRules/FortiGate/FortiGate.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: FortiGate
id: FortiGate
name: FortiGate Parsing Rule
id: FortiGate_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
6 changes: 6 additions & 0 deletions Packs/FortiGate/ReleaseNotes/2_0_8.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### FortiGate Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/FortiGate/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "FortiGate",
"description": "Manage FortiGate Firewall",
"support": "xsoar",
"currentVersion": "2.0.7",
"currentVersion": "2.0.8",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
2 changes: 1 addition & 1 deletion Packs/GitLab/ParsingRules/GitLab/GitLab.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: GitLab Parsing Rule
id: GitLab Parsing Rule
id: GitLab_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
6 changes: 6 additions & 0 deletions Packs/GitLab/ReleaseNotes/2_2_26.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### GitLab Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/GitLab/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "GitLab",
"description": "Pack for handling gitlab operations",
"support": "xsoar",
"currentVersion": "2.2.25",
"currentVersion": "2.2.26",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
fromversion: 6.8.0
id: illusove_networks_modeling_rule
name: Illusive Networks
id: Illusive_Networks_ModelingRule
name: Illusive Networks Modeling Rule
rules: ''
schema: ''
tags: Illusive Networks
Expand Down
6 changes: 6 additions & 0 deletions Packs/IllusiveNetworks/ReleaseNotes/1_0_34.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### Illusive Networks Modeling Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/IllusiveNetworks/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Illusive Networks",
"description": "Enrich SOC incident triage and investigation data with valuable Illusive information and forensics, and manage the way Illusive deploys deceptions across the network.",
"support": "partner",
"currentVersion": "1.0.33",
"currentVersion": "1.0.34",
"author": "Illusive Networks",
"url": "https://www.illusivenetworks.com",
"email": "[email protected]",
Expand Down
4 changes: 2 additions & 2 deletions Packs/Imperva_WAF/ModelingRules/Imperva_WAF/Imperva_WAF.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
fromversion: 6.10.0
id: imperva_waf
name: Imperva WAF
id: Imperva_WAF_ModelingRule
name: Imperva WAF Modeling Rule
rules: ''
schema: ''
tags: ''
6 changes: 6 additions & 0 deletions Packs/Imperva_WAF/ReleaseNotes/1_0_20.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### Imperva WAF Modeling Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/Imperva_WAF/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Imperva WAF",
"description": "Use the Imperva WAF integration to manage IP groups and Web security policies in Imperva WAF.",
"support": "xsoar",
"currentVersion": "1.0.19",
"currentVersion": "1.0.20",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
2 changes: 1 addition & 1 deletion Packs/Infoblox/ModelingRules/Infoblox/Infoblox.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 6.8.0
id: infoblox_modeling_rules
id: Infoblox_ModelingRule
name: Infoblox Modeling Rules
rules: ''
schema: ''
Expand Down
6 changes: 6 additions & 0 deletions Packs/Infoblox/ReleaseNotes/1_1_6.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### Infoblox Modeling Rules

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/Infoblox/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Infoblox NIOS",
"description": "Infoblox is a comprehensive solution that consolidates DNS, DHCP, and IP address management into a single platform. It is designed to simplify network management by automating these critical functions and providing a centralized console for managing them.",
"support": "xsoar",
"currentVersion": "1.1.5",
"currentVersion": "1.1.6",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 8.2.0 # Will be updated with XSIAM version updates
id: Ivanti_Connect_Secure_Modeling_Rules
id: Ivanti_Connect_Secure_ModelingRule
name: Ivanti Connect Secure Modeling Rules
rules: ''
schema: ''
Expand Down
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
id: Ivanti_Connect_Secure_Parsing_Rules
id: Ivanti_Connect_Secure_ParsingRule
name: Ivanti Connect Secure Parsing Rules
fromversion: 8.2.0
tags: [Ivanti, Pulse, Connect Secure, Pulse Secure, VPN]
Expand Down
12 changes: 12 additions & 0 deletions Packs/IvantiConnectSecure/ReleaseNotes/1_0_2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@

#### Modeling Rules

##### Ivanti Connect Secure Modeling Rules

- Updated the YML config file for backend compatibility.

#### Parsing Rules

##### Ivanti Connect Secure Parsing Rules

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/IvantiConnectSecure/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Ivanti Connect Secure",
"description": "XSIAM Modeling & Parsing Rules for ICS (Ivanti Connect Secure).",
"support": "xsoar",
"currentVersion": "1.0.1",
"currentVersion": "1.0.2",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
2 changes: 1 addition & 1 deletion Packs/JuniperSRX/ParsingRules/JuniperSRX/JuniperSRX.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: JuniperSRX Parsing Rule
id: JuniperSRX Parsing Rule
id: JuniperSRX_ParsingRule
fromversion: 6.10.0
tags: []
rules: ''
Expand Down
6 changes: 6 additions & 0 deletions Packs/JuniperSRX/ReleaseNotes/1_0_12.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Parsing Rules

##### JuniperSRX Parsing Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/JuniperSRX/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "JuniperSRX",
"description": "Modeling Rules for the JuniperSRX logs collector",
"support": "xsoar",
"currentVersion": "1.0.11",
"currentVersion": "1.0.12",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
2 changes: 1 addition & 1 deletion Packs/Kubernetes/ModelingRules/Kubernetes/Kubernetes.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
fromversion: 8.2.0
id: Kubernetes_Modeling_Rules
id: Kubernetes_ModelingRule
name: Kubernetes Modeling Rules
rules: ''
schema: ''
Expand Down
2 changes: 1 addition & 1 deletion Packs/Kubernetes/ParsingRules/Kubernetes/Kubernetes.yml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
name: Kubernetes Parsing Rules
id: Kubernetes_Parsing_Rules
id: Kubernetes_ParsingRule
fromversion: 8.2.0
tags: []
rules: ''
Expand Down
12 changes: 12 additions & 0 deletions Packs/Kubernetes/ReleaseNotes/1_0_2.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@

#### Modeling Rules

##### Kubernetes Modeling Rules

- Updated the YML config file for backend compatibility.

#### Parsing Rules

##### Kubernetes Parsing Rules

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/Kubernetes/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "Kubernetes",
"description": "An open-source container orchestration platform that automates deploying, managing and scaling containerized applications.",
"support": "xsoar",
"currentVersion": "1.0.1",
"currentVersion": "1.0.2",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down
4 changes: 2 additions & 2 deletions Packs/MacOS/ModelingRules/MacOS/MacOS.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
fromversion: 8.2.0
id: MacOS
name: MacOS
id: MacOS_ModelingRule
name: MacOS Modeling Rule
rules: ''
schema: ''
tags: ''
6 changes: 6 additions & 0 deletions Packs/MacOS/ReleaseNotes/1_0_3.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@

#### Modeling Rules

##### MacOS Modeling Rule

- Updated the YML config file for backend compatibility.
2 changes: 1 addition & 1 deletion Packs/MacOS/pack_metadata.json
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
"name": "MacOS",
"description": "The operating system the powers every Mac device. A Unix operating system developed and marketed by Apple.",
"support": "xsoar",
"currentVersion": "1.0.2",
"currentVersion": "1.0.3",
"author": "Cortex XSOAR",
"url": "https://www.paloaltonetworks.com/cortex",
"email": "",
Expand Down

0 comments on commit 55c7666

Please sign in to comment.