From ab5a97724830389aea67ea308f5fb0e86fd43f74 Mon Sep 17 00:00:00 2001 From: Subhobrata Dey Date: Thu, 1 Aug 2024 22:01:21 +0000 Subject: [PATCH] fix mappings integ tests Signed-off-by: Subhobrata Dey --- src/test/resources/ad_ldap-sample.json | 5 +-- src/test/resources/azure-sample.json | 39 ++++++++++++++++------- src/test/resources/cloudtrail-sample.json | 17 ++++++---- src/test/resources/s3-sample.json | 4 +-- src/test/resources/waf-sample.json | 3 +- 5 files changed, 46 insertions(+), 22 deletions(-) diff --git a/src/test/resources/ad_ldap-sample.json b/src/test/resources/ad_ldap-sample.json index 3b89ca581..4e9b2caf3 100644 --- a/src/test/resources/ad_ldap-sample.json +++ b/src/test/resources/ad_ldap-sample.json @@ -2,7 +2,7 @@ "azure.signinlogs.properties.user_id": "1234", "azure.activitylogs.category": "1234", "azure.platformlogs.operation_name": "1234", - "modified_properties.new_value": "1234", + "ModifiedProperties.NewValue": "1234", "azure.resource.provider": "1234", "azure.signinlogs.properties.conditional_access_status": "1234", "SearchFilter": "1234", @@ -18,5 +18,6 @@ "EventID": 12345, "azure.signinlogs.properties.network_location_details": "1234", "azure.auditlogs.properties.activity_display_name": "1234", - "creationTime": "2022-12-27T20:29:31.734Z" + "creationTime": "2022-12-27T20:29:31.734Z", + "DeviceDetail.isCompliant": true } diff --git a/src/test/resources/azure-sample.json b/src/test/resources/azure-sample.json index bccf2cf40..7c0facebd 100644 --- a/src/test/resources/azure-sample.json +++ b/src/test/resources/azure-sample.json @@ -1,27 +1,44 @@ { - "azure.signinlogs.props.user_id": "111", + "azure.signinlogs.properties.user_id": "111", "azure.activitylogs.category": "111", "modified_properties.new_value": "111", + "azure.activitylogs.identity.claims_initiated_by_user.name": "111", "azure.resource.provider": "111", - "azure.signinlogs.props.conditional_access_status": "111", + "azure.signinlogs.properties.conditional_access_status": "111", "SearchFilter": "111", "azure.platformlogs.result_type": "111", - "azure.signinlogs.props.device_detail.is_compliant": true, + "azure.signinlogs.properties.device_detail.is_compliant": true, "ResourceDisplayName": 111, - "azure.signinlogs.props.authentication_requirement": "111", + "azure.signinlogs.properties.resource_tenant_id": "111", + "azure.signinlogs.properties.authentication_requirement": "111", "TargetResources": "111", "Workload": "111", - "azure.signinlogs.props.device_detail.device_id": "111", + "azure.signinlogs.properties.device_detail.device_id": "111", "azure.platformlogs.operation_name": "111", - "azure.signinlogs.props.resource_id": "111", + "azure.signinlogs.properties.resource_id": "111", "EventID": 1234, - "azure.signinlogs.props.network_location_details": "111", - "azure.auditlogs.props.activity_display_name": "111", - "azure.signinlogs.result-description": "111", + "failure_status_reason": "111", + "azure.signinlogs.properties.network_location_details": "111", + "azure.auditlogs.properties.activity_display_name": "111", + "azure.signinlogs.result_description": "111", "eventSource": "111", "eventName": "111", "azure.platformlogs.status": "111", "azure.auditlogs.props.logged_by_service": "111", - "properties_message": "111", - "creationTime": "2022-12-27T20:29:31.734Z" + "properties.message": "111", + "creationTime": "2022-12-27T20:29:31.734Z", + "Count": "111", + "azure.signinlogs.properties.app_id": "111", + "azure.signinlogs.properties.client_app_used": true, + "ActivityDetails": "111", + "Target": "111", + "azure.signinlogs.properties.device_detail.trust_type": "111", + "azure.signinlogs.properties.home_tenant_id": "111", + "ConsentContext.IsAdminConsent": true, + "InitiatedBy": "111", + "azure.activitylogs.operation_name": "111", + "user_agent.name": "111", + "azure.signinlogs.properties.risk_state": "111", + "riskEventType": "111", + "azure.auditlogs.properties.logged_by_service": "111" } diff --git a/src/test/resources/cloudtrail-sample.json b/src/test/resources/cloudtrail-sample.json index 02e9ee2fb..0cf13e37a 100644 --- a/src/test/resources/cloudtrail-sample.json +++ b/src/test/resources/cloudtrail-sample.json @@ -16,16 +16,21 @@ "aws-cloudtrail-event_name": "123", "aws-cloudtrail-event_source": "123", "aws-cloudtrail-event_type": "123", - "aws-cloudtrail-error_message": "123", + "aws.cloudtrail.error_message": "123", "aws-cloudtrail-error_code": "123", - "aws-cloudtrail-response_elements-text": "123", - "aws-cloudtrail-response_elements-pending_modified_values-master_user_password": "123", + "aws.cloudtrail.response_elements.text": "123", + "aws.cloudtrail.response_elements.pending_modified_values.master_user_password": "123", "aws-cloudtrail-response_elements-publicly_accessible": "123", "aws-cloudtrail-request_parameters-arn": "123", - "aws-cloudtrail-request_parameters-attribute": "123", + "aws.cloudtrail.request_parameters.attribute": "123", "aws-cloudtrail-request_parameters-username": "123", - "aws-cloudtrail-request_parameters-container_definitions-command": "123", - "aws-cloudtrail-user_identity-session_context-session_issuer-type": "123", + "aws.cloudtrail.request_parameters.container_definitions.command": "123", + "aws.cloudtrail.user_identity.session_context.session_issuer.type": "123", "aws-cloudtrail-user_identity-arn": "123", + "aws.cloudtrail.user_identity.type": "123", + "aws.cloudtrail.response_elements.publicly_accessible": "123", + "aws.cloudtrail.user_agent": "123", + "requestParameters": "123", + "type": "123", "eventTime": "2022-12-27T20:29:31.734Z" } diff --git a/src/test/resources/s3-sample.json b/src/test/resources/s3-sample.json index 440dcf184..68f84b042 100644 --- a/src/test/resources/s3-sample.json +++ b/src/test/resources/s3-sample.json @@ -8,7 +8,7 @@ "Operation": "123", "RequestURI_key": "123", "aws.s3access.requester": "1234", - "aws-cloudtrail-event_source": "123", - "aws-cloudtrail-event_name": "123", + "aws.cloudtrail.event_source": "123", + "aws.cloudtrail.event_name": "123", "eventTime": "123" } diff --git a/src/test/resources/waf-sample.json b/src/test/resources/waf-sample.json index 51a09cb4b..cf925a70e 100644 --- a/src/test/resources/waf-sample.json +++ b/src/test/resources/waf-sample.json @@ -53,5 +53,6 @@ { "name": "awswaf:managed:aws:bot-control:signal:known_bot_data_center" } - ] + ], + "waf.request.headers.user_agent": "111" }