-
Notifications
You must be signed in to change notification settings - Fork 511
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[FR] Add max_signal note, unit test, and rule tuning #3669
[FR] Add max_signal note, unit test, and rule tuning #3669
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🟢 Manual review, looks good to me! 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Change ## Setup to "setup" field and we should be good!
rules/promotions/credential_access_endgame_cred_dumping_prevented.toml
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is really nice, thanks @Mikaayenson! One suggestion for the wording.
rules/integrations/cloud_defend/container_workload_protection.toml
Outdated
Show resolved
Hide resolved
Removed changes from: - rules/integrations/cloud_defend/container_workload_protection.toml (selectively cherry picked from commit f07a9e6)
Removed changes from: - rules/integrations/cloud_defend/container_workload_protection.toml (selectively cherry picked from commit f07a9e6)
Removed changes from: - rules/integrations/cloud_defend/container_workload_protection.toml (selectively cherry picked from commit f07a9e6)
Removed changes from: - rules/integrations/cloud_defend/container_workload_protection.toml (selectively cherry picked from commit f07a9e6)
Removed changes from: - rules/integrations/cloud_defend/container_workload_protection.toml (selectively cherry picked from commit f07a9e6)
(cherry picked from commit f07a9e6)
(cherry picked from commit f07a9e6)
(cherry picked from commit f07a9e6)
(cherry picked from commit f07a9e6)
(cherry picked from commit f07a9e6)
(cherry picked from commit f07a9e6)
Issues
Resolves #3666
Summary
max_signals
field for custom rules in UI [classic] security-docs#5106Bug Fixes
self.assert_