[Security Solution] Add missing 8.4 Policy advanced options (#137333) (#137351)

* [Security Solution] Add missing 8.4 Policy advanced options

(cherry picked from commit e3f62dcc03)

Co-authored-by: Kevin Logan <56395104+kevinlog@users.noreply.github.com>
This commit is contained in:
Kibana Machine 2022-07-27 18:04:51 -04:00 committed by GitHub
parent 435bb0c5c7
commit a206de1b33
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -982,4 +982,26 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
}
),
},
{
key: 'windows.advanced.memory_protection.context_manipulation_detection',
first_supported_version: '8.4',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.memory_protection.context_manipulation_detection',
{
defaultMessage:
'Detect injection based on thread context manipulation (e.g. `SetThreadContext`) as a part of memory protection. Default: true',
}
),
},
{
key: 'windows.advanced.kernel.image_and_process_file_timestamp',
first_supported_version: '8.4',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.kernel.image_and_process_file_timestamp',
{
defaultMessage:
'Collect executable/dll timestamps for process and async image load events. Default: true',
}
),
},
];