diff --git a/CHANGELOG.md b/CHANGELOG.md index 175988a70..d3e529d96 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -49,6 +49,8 @@ Thankyou! --> 1. Added `has_mfa` as a `boolean_t`. #1155 ### Improved +* #### Event Classes + 1. Added `evidences` to `compliance_finding` class. #1157 * #### Objects 1. Added `phone_number` to `user` and `ldap_person` objects. #1155 2. Added `has_mfa` to `user` object. #1155 diff --git a/dictionary.json b/dictionary.json index 1a2f2275e..8741d8f1a 100644 --- a/dictionary.json +++ b/dictionary.json @@ -1858,7 +1858,7 @@ }, "evidences": { "caption": "Evidence Artifacts", - "description": "Describes various evidence artifacts associated to the activity/activities that triggered a security detection.", + "description": "A collection of evidence artifacts associated to the activity/activities that triggered a finding. See specific usage.", "type": "evidences", "is_array": true }, diff --git a/events/findings/compliance_finding.json b/events/findings/compliance_finding.json index 95260cab2..db70760fd 100644 --- a/events/findings/compliance_finding.json +++ b/events/findings/compliance_finding.json @@ -9,6 +9,11 @@ "group": "primary", "requirement": "required" }, + "evidences": { + "group": "context", + "description": "Describes various evidence artifacts associated with the compliance finding.", + "requirement": "optional" + }, "remediation": { "group": "context", "requirement": "recommended" diff --git a/events/findings/detection_finding.json b/events/findings/detection_finding.json index 0158f929f..2417cd2e7 100644 --- a/events/findings/detection_finding.json +++ b/events/findings/detection_finding.json @@ -10,6 +10,7 @@ ], "evidences": { "group": "primary", + "description": "Describes various evidence artifacts associated to the activity/activities that triggered a security detection.", "requirement": "recommended" }, "impact": {