[Security Solution] Add Persistence to allow filter list (#139515) (#139748)

* Add Persistence fields

* [CI] Auto-commit changed files from 'node scripts/precommit_hook.js --ref HEAD~1..HEAD --fix'

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: Colson Wilhoit <48036388+DefSecSentinel@users.noreply.github.com>
(cherry picked from commit c6a360d978)

Co-authored-by: Ricardo Ungureanu <81707160+ricardoungureanu@users.noreply.github.com>
This commit is contained in:
Kibana Machine 2022-08-30 14:12:49 -04:00 committed by GitHub
parent f7c7d82ab5
commit f9c7246560
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 0 deletions

View file

@ -102,6 +102,7 @@ const allowlistBaseEventFields: AllowlistFields = {
user: {
id: true,
},
Persistence: true,
};
// Allow list for the data we include in the events. True means that it is deep-cloned

View file

@ -150,6 +150,12 @@ describe('TelemetryEventsSender', () => {
threat: {
ignored_object: true, // this field is not allowlisted
},
Persistence: {
name: 'foo',
path: '/foo/bar',
runatload: true,
args: ['foo', 'bar'],
},
},
];
@ -263,6 +269,12 @@ describe('TelemetryEventsSender', () => {
},
},
},
Persistence: {
name: 'foo',
path: '/foo/bar',
runatload: true,
args: ['foo', 'bar'],
},
},
]);
});