Update network filters. (#158353)

## Summary

Updates the prebuilt rule alerts filterlist to allow through some
additional network fields.
This commit is contained in:
Pete Hampton 2023-05-26 17:35:58 +01:00 committed by GitHub
parent 7655cb9e9e
commit 7c5b99f65b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -92,9 +92,7 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
hash: true,
},
},
destination: {
port: true,
},
destination: true,
dll: {
Ext: {
relative_file_creation_time: true,
@ -135,13 +133,7 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
},
},
message: true,
network: {
bytes: true,
direction: true,
protocol: true,
transport: true,
type: true,
},
network: true,
orchestrator: {
namespace: true,
resource: {
@ -212,20 +204,14 @@ export const prebuiltRuleAllowlistFields: AllowlistFields = {
rule: {
name: true,
},
source: {
port: true,
},
source: true,
tls: {
server: {
hash: true,
},
},
type: true,
url: {
extension: true,
full: true,
path: true,
},
url: true,
user_agent: {
original: true,
},