Skip to content

Commit

Permalink
[8.8] [Security Solution] Advanced policy options for Endpoint 8.8 (#…
Browse files Browse the repository at this point in the history
…156308) (#156319)

# Backport

This will backport the following commits from `main` to `8.8`:
- [[Security Solution] Advanced policy options for Endpoint 8.8
(#156308)](#156308)

<!--- Backport version: 8.9.7 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sqren/backport)

<!--BACKPORT [{"author":{"name":"Kevin
Logan","email":"[email protected]"},"sourceCommit":{"committedDate":"2023-05-01T22:44:35Z","message":"[Security
Solution] Advanced policy options for Endpoint 8.8 (#156308)\n\n##
Summary\r\n\r\nAdds several more advanced options for Endpoint to
Policy.\r\n\r\n\r\n![image](https://user-images.githubusercontent.com/56395104/235530865-635a6427-336c-4120-9112-47fb3ea9fe5e.png)\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<[email protected]>","sha":"47b1ca38136cacfebf98b4f1fd16fc0e2cdd8ecf","branchLabelMapping":{"^v8.9.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","Team:Defend
Workflows","v8.8.0","v8.9.0"],"number":156308,"url":"https://github.com/elastic/kibana/pull/156308","mergeCommit":{"message":"[Security
Solution] Advanced policy options for Endpoint 8.8 (#156308)\n\n##
Summary\r\n\r\nAdds several more advanced options for Endpoint to
Policy.\r\n\r\n\r\n![image](https://user-images.githubusercontent.com/56395104/235530865-635a6427-336c-4120-9112-47fb3ea9fe5e.png)\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<[email protected]>","sha":"47b1ca38136cacfebf98b4f1fd16fc0e2cdd8ecf"}},"sourceBranch":"main","suggestedTargetBranches":["8.8"],"targetPullRequestStates":[{"branch":"8.8","label":"v8.8.0","labelRegex":"^v(\\d+).(\\d+).\\d+$","isSourceBranch":false,"state":"NOT_CREATED"},{"branch":"main","label":"v8.9.0","labelRegex":"^v8.9.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/156308","number":156308,"mergeCommit":{"message":"[Security
Solution] Advanced policy options for Endpoint 8.8 (#156308)\n\n##
Summary\r\n\r\nAdds several more advanced options for Endpoint to
Policy.\r\n\r\n\r\n![image](https://user-images.githubusercontent.com/56395104/235530865-635a6427-336c-4120-9112-47fb3ea9fe5e.png)\r\n\r\n###
Checklist\r\n\r\nDelete any items that are not applicable to this
PR.\r\n\r\n- [x] Any text added follows [EUI's
writing\r\nguidelines](https://elastic.github.io/eui/#/guidelines/writing),
uses\r\nsentence case text and includes
[i18n\r\nsupport](https://github.com/elastic/kibana/blob/main/packages/kbn-i18n/README.md)\r\n\r\n---------\r\n\r\nCo-authored-by:
kibanamachine
<[email protected]>","sha":"47b1ca38136cacfebf98b4f1fd16fc0e2cdd8ecf"}}]}]
BACKPORT-->

Co-authored-by: Kevin Logan <[email protected]>
  • Loading branch information
kibanamachine and kevinlog authored May 2, 2023
1 parent 390d50f commit edd78ba
Showing 1 changed file with 183 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -1081,4 +1081,187 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
}
),
},
{
key: 'windows.advanced.events.callstacks.emit_in_events',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.emit_in_events',
{
defaultMessage:
'If set, callstacks will be included in regular events where they are collected. Otherwise, they are only included in events that trigger behavioral protection rules. Note that setting this may significantly increase data volumes. Default: false',
}
),
},
{
key: 'windows.advanced.events.callstacks.process',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.process',
{
defaultMessage: 'Collect callstacks during process events? Default: true',
}
),
},
{
key: 'windows.advanced.events.callstacks.image_load',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.image_load',
{
defaultMessage: 'Collect callstacks during image/library load events? Default: true',
}
),
},
{
key: 'windows.advanced.events.callstacks.file',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.file',
{
defaultMessage: 'Collect callstacks during file events? Default: true',
}
),
},
{
key: 'windows.advanced.events.callstacks.registry',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.registry',
{
defaultMessage: 'Collect callstacks during registry events? Default: true',
}
),
},
{
key: 'windows.advanced.artifacts.global.proxy_url',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.global.proxy_url',
{
defaultMessage:
'Proxy server to use when downloading global artifact manifests. Default: none',
}
),
},
{
key: 'windows.advanced.artifacts.global.proxy_disable',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.global.proxy_disable',
{
defaultMessage:
'If the proxy setting should be used when downloading global artifact manifests. Default: false',
}
),
},
{
key: 'windows.advanced.artifacts.user.proxy_url',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.user.proxy_url',
{
defaultMessage:
'Proxy server to use when downloading user artifact manifests. Default: none',
}
),
},
{
key: 'windows.advanced.artifacts.user.proxy_disable',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.user.proxy_disable',
{
defaultMessage:
'If the proxy setting should be used when downloading user artifact manifests. Default: false',
}
),
},
{
key: 'mac.advanced.artifacts.global.proxy_url',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.global.proxy_url',
{
defaultMessage:
'Proxy server to use when downloading global artifact manifests. Default: none',
}
),
},
{
key: 'mac.advanced.artifacts.global.proxy_disable',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.global.proxy_disable',
{
defaultMessage:
'If the proxy setting should be used when downloading global artifact manifests. Default: false',
}
),
},
{
key: 'mac.advanced.artifacts.user.proxy_url',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.user.proxy_url',
{
defaultMessage:
'Proxy server to use when downloading user artifact manifests. Default: none',
}
),
},
{
key: 'mac.advanced.artifacts.user.proxy_disable',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.user.proxy_disable',
{
defaultMessage:
'If the proxy setting should be used when downloading user artifact manifests. Default: false',
}
),
},
{
key: 'linux.advanced.artifacts.global.proxy_url',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.global.proxy_url',
{
defaultMessage:
'Proxy server to use when downloading global artifact manifests. Default: none',
}
),
},
{
key: 'linux.advanced.artifacts.global.proxy_disable',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.global.proxy_disable',
{
defaultMessage:
'If the proxy setting should be used when downloading global artifact manifests. Default: false',
}
),
},
{
key: 'linux.advanced.artifacts.user.proxy_url',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.user.proxy_url',
{
defaultMessage:
'Proxy server to use when downloading user artifact manifests. Default: none',
}
),
},
{
key: 'linux.advanced.artifacts.user.proxy_disable',
first_supported_version: '8.8',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.user.proxy_disable',
{
defaultMessage:
'If the proxy setting should be used when downloading user artifact manifests. Default: false',
}
),
},
];

0 comments on commit edd78ba

Please sign in to comment.