Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TI matching rule for common security log #3801

Merged
merged 2 commits into from
Dec 28, 2021
Merged

Conversation

aprakash13
Copy link
Contributor

Before submitting this PR please ensure that you have read the following sections and then completed the template below:

Thank you for your contribution to the Microsoft Sentinel Github repo.

The code should have been tested in a Microsoft Sentinel environment that does not have any custom parsers, functions or tables, so that you validate no incorrect syntax and execution functions properly.

Details of the code changes in your submitted PR. Providing descriptions for pull requests ensures, there is context to changes being made and greatly enhances the code review process. Providing associated Issues that this resolves also easily connects the reason.

Change(s):

After the submission has been made, please look at the Validation Checks:

Check that the validations are passing and address any issues that are present. Let us know if you have tried fixing and need help.

References:

PR Template


Description for the PR:
(Enter the description below)

Adding new TI map detection rule for CommonSecurityLog table that matches on the IP address.
This was raised as an issue: #3675

Testing Completed:
Yes/ No : Yes


@shainw shainw merged commit 4afaae9 into master Dec 28, 2021
@shainw shainw self-assigned this Dec 28, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants