[Security Solution] Add missing 8.4 Policy advanced options (#137333)

* [Security Solution] Add missing 8.4 Policy advanced options
This commit is contained in:
Kevin Logan 2022-07-27 16:30:12 -04:00 committed by GitHub
parent ccabbc735b
commit e3f62dcc03
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -982,4 +982,26 @@ export const AdvancedPolicySchema: AdvancedPolicySchemaType[] = [
}
),
},
{
key: 'windows.advanced.memory_protection.context_manipulation_detection',
first_supported_version: '8.4',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.memory_protection.context_manipulation_detection',
{
defaultMessage:
'Detect injection based on thread context manipulation (e.g. `SetThreadContext`) as a part of memory protection. Default: true',
}
),
},
{
key: 'windows.advanced.kernel.image_and_process_file_timestamp',
first_supported_version: '8.4',
documentation: i18n.translate(
'xpack.securitySolution.endpoint.policy.advanced.windows.advanced.kernel.image_and_process_file_timestamp',
{
defaultMessage:
'Collect executable/dll timestamps for process and async image load events. Default: true',
}
),
},
];