From 9c7e4dff327dc394603336e7f9a0abe1078c0694 Mon Sep 17 00:00:00 2001 From: Kevin Logan Date: Mon, 1 May 2023 16:38:38 -0400 Subject: [PATCH 1/2] [Security Solution] Advanced policy options for Endpoint 8.8 --- .../policy/models/advanced_policy_schema.ts | 187 ++++++++++++++++++ 1 file changed, 187 insertions(+) diff --git a/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts b/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts index 740cf00acba9e..283ced42df39d 100644 --- a/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts +++ b/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts @@ -1081,4 +1081,191 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [ } ), }, + { + key: 'windows.advanced.events.callstacks.emit_in_events', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.emit_in_events', + { + defaultMessage: + 'If set, callstacks will be included in regular events where they are collected. Otherwise, they are only included in events that trigger behavioral protection rules. Note that setting this may significantly increase data volumes. Default: false', + } + ), + }, + { + key: 'windows.advanced.events.callstacks.process', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.process', + { + defaultMessage: + 'Collect callstacks during process events? Default: true', + } + ), + }, + { + key: 'windows.advanced.events.callstacks.image_load', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.image_load', + { + defaultMessage: + 'Collect callstacks during image/library load events? Default: true', + } + ), + }, + { + key: 'windows.advanced.events.callstacks.file', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.file', + { + defaultMessage: + 'Collect callstacks during file events? Default: true', + } + ), + }, + { + key: 'windows.advanced.events.callstacks.registry', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.registry', + { + defaultMessage: + 'Collect callstacks during registry events? Default: true', + } + ), + }, + { + key: 'windows.advanced.artifacts.global.proxy_url', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.global.proxy_url', + { + defaultMessage: + 'Proxy server to use when downloading global artifact manifests. Default: none', + } + ), + }, + { + key: 'windows.advanced.artifacts.global.proxy_disable', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.global.proxy_disable', + { + defaultMessage: + 'If the proxy setting should be used when downloading global artifact manifests. Default: false', + } + ), + }, + { + key: 'windows.advanced.artifacts.user.proxy_url', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.user.proxy_url', + { + defaultMessage: + 'Proxy server to use when downloading user artifact manifests. Default: none', + } + ), + }, + { + key: 'windows.advanced.artifacts.user.proxy_disable', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.artifacts.user.proxy_disable', + { + defaultMessage: + 'If the proxy setting should be used when downloading user artifact manifests. Default: false', + } + ), + }, + { + key: 'mac.advanced.artifacts.global.proxy_url', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.global.proxy_url', + { + defaultMessage: + 'Proxy server to use when downloading global artifact manifests. Default: none', + } + ), + }, + { + key: 'mac.advanced.artifacts.global.proxy_disable', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.global.proxy_disable', + { + defaultMessage: + 'If the proxy setting should be used when downloading global artifact manifests. Default: false', + } + ), + }, + { + key: 'mac.advanced.artifacts.user.proxy_url', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.user.proxy_url', + { + defaultMessage: + 'Proxy server to use when downloading user artifact manifests. Default: none', + } + ), + }, + { + key: 'mac.advanced.artifacts.user.proxy_disable', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.artifacts.user.proxy_disable', + { + defaultMessage: + 'If the proxy setting should be used when downloading user artifact manifests. Default: false', + } + ), + }, + { + key: 'linux.advanced.artifacts.global.proxy_url', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.global.proxy_url', + { + defaultMessage: + 'Proxy server to use when downloading global artifact manifests. Default: none', + } + ), + }, + { + key: 'linux.advanced.artifacts.global.proxy_disable', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.global.proxy_disable', + { + defaultMessage: + 'If the proxy setting should be used when downloading global artifact manifests. Default: false', + } + ), + }, + { + key: 'linux.advanced.artifacts.user.proxy_url', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.user.proxy_url', + { + defaultMessage: + 'Proxy server to use when downloading user artifact manifests. Default: none', + } + ), + }, + { + key: 'linux.advanced.artifacts.user.proxy_disable', + first_supported_version: '8.8', + documentation: i18n.translate( + 'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.artifacts.user.proxy_disable', + { + defaultMessage: + 'If the proxy setting should be used when downloading user artifact manifests. Default: false', + } + ), + }, ]; From e0cb7a03c973779e1820527b309d00ac7426a0e3 Mon Sep 17 00:00:00 2001 From: kibanamachine <42973632+kibanamachine@users.noreply.github.com> Date: Mon, 1 May 2023 21:08:57 +0000 Subject: [PATCH 2/2] [CI] Auto-commit changed files from 'node scripts/precommit_hook.js --ref HEAD~1..HEAD --fix' --- .../pages/policy/models/advanced_policy_schema.ts | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts b/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts index 283ced42df39d..560aadf29a1f4 100644 --- a/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts +++ b/x-pack/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts @@ -1098,8 +1098,7 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [ documentation: i18n.translate( 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.process', { - defaultMessage: - 'Collect callstacks during process events? Default: true', + defaultMessage: 'Collect callstacks during process events? Default: true', } ), }, @@ -1109,8 +1108,7 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [ documentation: i18n.translate( 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.image_load', { - defaultMessage: - 'Collect callstacks during image/library load events? Default: true', + defaultMessage: 'Collect callstacks during image/library load events? Default: true', } ), }, @@ -1120,8 +1118,7 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [ documentation: i18n.translate( 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.file', { - defaultMessage: - 'Collect callstacks during file events? Default: true', + defaultMessage: 'Collect callstacks during file events? Default: true', } ), }, @@ -1131,8 +1128,7 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [ documentation: i18n.translate( 'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.events.callstacks.registry', { - defaultMessage: - 'Collect callstacks during registry events? Default: true', + defaultMessage: 'Collect callstacks during registry events? Default: true', } ), },