Adding new fields to the allowlist for alert telemetry (#90868)

This commit is contained in:
Jessica David 2021-02-10 11:26:58 -05:00 committed by GitHub
parent f563a82903
commit d1653bc425
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 8 additions and 0 deletions

View file

@ -558,6 +558,8 @@ export class EndpointDocGenerator {
version: '3.0.33',
},
temp_file_path: 'C:/temp/fake_malware.exe',
quarantine_result: true,
quarantine_message: 'fake quarantine message',
},
},
process: {

View file

@ -47,6 +47,8 @@ describe('TelemetryEventsSender', () => {
malware_classification: {
key1: 'X',
},
quarantine_result: true,
quarantine_message: 'this file is bad',
something_else: 'nope',
},
},
@ -79,6 +81,8 @@ describe('TelemetryEventsSender', () => {
malware_classification: {
key1: 'X',
},
quarantine_result: true,
quarantine_message: 'this file is bad',
},
},
host: {

View file

@ -320,6 +320,8 @@ const allowlistEventFields: AllowlistFields = {
Ext: {
code_signature: true,
malware_classification: true,
quarantine_result: true,
quarantine_message: true,
},
},
host: {