change

Azure · Nov 7, 2024 · f58225c · f58225c
1 parent 190513f
commit f58225c
Show file tree

Hide file tree

Showing 9 changed files with 4 additions and 3 deletions.
diff --git a/.github/workflows/convertKqlFunctionYamlToArmTemplate.yaml b/.github/workflows/convertKqlFunctionYamlToArmTemplate.yaml
@@ -15,6 +15,7 @@ on:
        - 'Parsers/ASimRegistryEvent/Parsers/**'
        - 'Parsers/ASimUserManagement/Parsers/**'
        - 'Parsers/ASimDhcpEvent/Parsers/**'
+       - 'Parsers/ASimAlertEvent/Parsers/**'
 
 env:
   GITHUB_APPS_ID: "${{ secrets.APPLICATION_ID }}"

diff --git a/.script/getModifiedASimSchemas.ps1 b/.script/getModifiedASimSchemas.ps1
@@ -1,5 +1,5 @@
 function getModifiedAsimSchemas() {
-    $schemas = ("ASimDns", "ASimWebSession", "ASimNetworkSession", "ASimProcessEvent", "ASimAuditEvent", "ASimAuthentication", "ASimFileEvent", "ASimRegistryEvent","ASimUserManagement","ASimDhcpEvent")
+    $schemas = ("ASimDns", "ASimWebSession", "ASimNetworkSession", "ASimProcessEvent", "ASimAuditEvent", "ASimAuthentication", "ASimFileEvent", "ASimRegistryEvent","ASimUserManagement","ASimDhcpEvent","ASimAlertEvent")
     $modifiedSchemas = @()
     foreach ($schema in $schemas) {
         $filesThatWereChanged= Invoke-Expression "git diff origin/master  --name-only -- $($PSScriptRoot)/../Parsers/$($schema)/Parsers"

diff --git a/Parsers/ASimAlert/Parsers/ASimAlert.yaml → ...SimAlertEvent/Parsers/ASimAlertEvent.yaml b/Parsers/ASimAlert/Parsers/ASimAlert.yaml → ...SimAlertEvent/Parsers/ASimAlertEvent.yaml
@@ -9,7 +9,7 @@ Normalization:
   Version: '0.1'
 References:
 - Title: ASIM Alert Schema
-  Link: https://aka.ms/ASimAlertDoc
+  Link: https://aka.ms/ASimAlertEventDoc
 - Title: ASIM
   Link: https://aka.ms/AboutASIM
 Description: |

diff --git a/...arsers/ASimAlertMicrosoftDefenderXDR.yaml → ...s/ASimAlertEventMicrosoftDefenderXDR.yaml b/...arsers/ASimAlertMicrosoftDefenderXDR.yaml → ...s/ASimAlertEventMicrosoftDefenderXDR.yaml
diff --git a/...sers/ASimAlertSentinelOneSingularity.yaml → ...ASimAlertEventSentinelOneSingularity.yaml b/...sers/ASimAlertSentinelOneSingularity.yaml → ...ASimAlertEventSentinelOneSingularity.yaml
diff --git a/Parsers/ASimAlert/Parsers/imAlert.yaml → .../ASimAlertEvent/Parsers/imAlertEvent.yaml b/Parsers/ASimAlert/Parsers/imAlert.yaml → .../ASimAlertEvent/Parsers/imAlertEvent.yaml
@@ -9,7 +9,7 @@ Normalization:
   Version: '0.1'
 References:
 - Title: ASIM Alert Schema
-  Link: https://aka.ms/ASimAlertDoc
+  Link: https://aka.ms/ASimAlertEventDoc
 - Title: ASIM
   Link: https://aka.ms/AboutASIM
 Description: |

diff --git a/Parsers/ASimAlert/Parsers/vimAlertEmpty.yaml → ...lertEvent/Parsers/vimAlertEventEmpty.yaml b/Parsers/ASimAlert/Parsers/vimAlertEmpty.yaml → ...lertEvent/Parsers/vimAlertEventEmpty.yaml
diff --git a/...Parsers/vimAlertMicrosoftDefenderXDR.yaml → ...rs/vimAlertEventMicrosoftDefenderXDR.yaml b/...Parsers/vimAlertMicrosoftDefenderXDR.yaml → ...rs/vimAlertEventMicrosoftDefenderXDR.yaml
diff --git a/...rsers/vimAlertSentinelOneSingularity.yaml → .../vimAlertEventSentinelOneSingularity.yaml b/...rsers/vimAlertSentinelOneSingularity.yaml → .../vimAlertEventSentinelOneSingularity.yaml