mirror of
https://github.com/elastic/kibana.git
synced 2025-04-24 09:48:58 -04:00
* [Security Solution] Add missing 8.4 Policy advanced options
(cherry picked from commit e3f62dcc03
)
Co-authored-by: Kevin Logan <56395104+kevinlog@users.noreply.github.com>
This commit is contained in:
parent
435bb0c5c7
commit
a206de1b33
1 changed files with 22 additions and 0 deletions
|
@ -982,4 +982,26 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
|
|||
}
|
||||
),
|
||||
},
|
||||
{
|
||||
key: 'windows.advanced.memory_protection.context_manipulation_detection',
|
||||
first_supported_version: '8.4',
|
||||
documentation: i18n.translate(
|
||||
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.memory_protection.context_manipulation_detection',
|
||||
{
|
||||
defaultMessage:
|
||||
'Detect injection based on thread context manipulation (e.g. `SetThreadContext`) as a part of memory protection. Default: true',
|
||||
}
|
||||
),
|
||||
},
|
||||
{
|
||||
key: 'windows.advanced.kernel.image_and_process_file_timestamp',
|
||||
first_supported_version: '8.4',
|
||||
documentation: i18n.translate(
|
||||
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.kernel.image_and_process_file_timestamp',
|
||||
{
|
||||
defaultMessage:
|
||||
'Collect executable/dll timestamps for process and async image load events. Default: true',
|
||||
}
|
||||
),
|
||||
},
|
||||
];
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue