github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-24 01:38:56 -04:00
Code Issues Projects Releases Packages Wiki Activity

Advanced policy opt-out for scan-on-event (#218354)

Browse source 
## Summary

Allow users to opt out of scan-on-event to help troubleshoot and resolve
performance issues.

## Release note

{elastic-defend} users can now opt out of event-driven Memory Protection
scanning via advanced policy.

### Checklist

Check the PR satisfies following conditions. 

Reviewers should verify this PR satisfies this list as well.

- [x] Any text added follows [EUI's writing
guidelines](https://elastic.github.io/eui/#/guidelines/writing), uses
sentence case text and includes [i18n
support](https://github.com/elastic/kibana/blob/main/src/platform/packages/shared/kbn-i18n/README.md)
- [x] The PR description includes the appropriate Release Notes section,
and the correct `release_note:*` label is applied per the
[guidelines](https://www.elastic.co/guide/en/kibana/master/contributing.html#kibana-release-notes-process)

---------

Co-authored-by: Konrad Szwarc <konrad.szwarc@elastic.co>
This commit is contained in:
Gabriel Landau 2025-04-17 15:00:15 -04:00 • committed by GitHub
parent 78bf949dbf
commit 906c8978e7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 55 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

55
x-pack/solutions/security/plugins/security_solution/public/management/pages/policy/models/advanced_policy_schema.ts
View file

@ -2378,4 +2378,59 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
}
),
},
{
key: 'linux.advanced.memory_protection.scan_on_network_event',
first_supported_version: '8.17.6',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.linux.advanced.memory_protection.scan_on_network_event',
{
defaultMessage:
'Allow Memory Protection to perform memory scans in response to network activity. Default: true',
}
),
},
{
key: 'mac.advanced.memory_protection.scan_on_network_event',
first_supported_version: '8.17.6',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.mac.advanced.memory_protection.scan_on_network_event',
{
defaultMessage:
'Allow Memory Protection to perform memory scans in response to network activity. Default: true',
}
),
},
{
key: 'windows.advanced.memory_protection.scan_on_network_event',
first_supported_version: '8.17.6',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.memory_protection.scan_on_network_event',
{
defaultMessage:
'Allow Memory Protection to perform memory scans in response to network activity. Default: true',
}
),
},
{
key: 'windows.advanced.memory_protection.scan_on_api_event',
first_supported_version: '8.17.6',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.memory_protection.scan_on_api_event',
{
defaultMessage:
'Allow Memory Protection to perform memory scans in response to API events. Default: true',
}
),
},
{
key: 'windows.advanced.memory_protection.scan_on_image_load_event',
first_supported_version: '8.17.6',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.memory_protection.scan_on_image_load_event',
{
defaultMessage:
'Allow Memory Protection to perform memory scans in response to image loads. Default: true',
}
),
},
];