Commit graph

6 commits

Author SHA1 Message Date
Candace Park
61c9137a1e
[Security Solution][Event Filters] Warning callout for incomplete code signature entries (#193749)
## Summary
Navigate to Security Solution > Manage > Event Filters > Add Event
Filter

- [x] Warning callout shown when code signature field is incomplete
(i.e. `process.code_signature.subject_name` w/o
`process.code_signature.trusted` or vice versa)
- [x] For mac operating systems, `process.code_signature.team_id` is
also accepted as an equivalent to `subject_name`
- [x] Warning callout is also shown for nested entries for this code
signature field: `process.Ext.code_signature`
- [x] Unit Tests

# Screenshots

![image](https://github.com/user-attachments/assets/e77cffa7-8b60-4441-9319-aa9964224bb9)

![image](https://github.com/user-attachments/assets/6ec7c6a1-28e8-4f8e-a6aa-3e65b1e0ba1b)

MAC

![image](https://github.com/user-attachments/assets/86354b92-d7e3-44f1-8719-d9791dcaf9cd)

NESTED

![image](https://github.com/user-attachments/assets/1392d7b2-0b63-40b8-95be-8a5bfa2e0af1)

Followup prs: need to address user being allowed to choose the nested
field: `process.Ext.code_signature` for a non-nested entry, need to
address what happens when a user chooses `false` instead of true for the
`trusted` field option

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2024-10-04 01:26:39 -05:00
Luke Elmers
b6287708f6
Adds AGPL 3.0 license (#192025)
Updates files outside of x-pack to be triple-licensed under Elastic
License 2.0, AGPL 3.0, or SSPL 1.0.
2024-09-06 19:02:41 -06:00
Candace Park
9a73eb4d3d
[Security Solution][Artifacts][Trusted Apps] Wildcard warning with IS operator for trusted apps creation/editing (#175356)
## Summary

- [x] Adds updated warning messaging for trusted apps entries that use
wildcards `*?` with the "IS" operator
- [x] Three different warnings: callout, individual entry item warnings
and a final confirmation modal when the user tries to add a trusted app
with ineffective IS / wildcard combination etnry.
- [x] Unit tests

# Screenshots
<img width="829" alt="image"
src="c7beec62-a249-4535-ac0b-34f9be57f542">
<img width="1649" alt="image"
src="22f38f1b-7e6b-4b69-8d03-4d74d8674fa6">

---------

Co-authored-by: kibanamachine <42973632+kibanamachine@users.noreply.github.com>
2024-02-13 21:43:25 -07:00
Wafaa Nasr
78b4851a21
[Security Solution][Exception]: Add to shared lists fixes (#146750)
## Summary

- Continuing from [PR](https://github.com/elastic/kibana/pull/146121) to
apply the same changes to the `Add to Shared Lists`.
- Fix showing the number of Linked rules correctly => in `route.ts` use
the `list.namespaceType` instead of namespaceTypes array
- Apply docs comment on the text
- Use the HeaderMenu item from the `kbn` package for the `Number of
Linked rules` menu
- Allow displaying the HeaderMenu without iconType
- Update snapshots and add tests in HeaderMenu
2022-12-02 15:02:33 +01:00
Wafaa Nasr
348ed233c3
[Security Solution][Exceptions] - Create/ refactor Exception-List common's components in @kbn/securitysolution-exception-list-components (#143363)
* feat: add list header components + refactoring

* add tests for comments and conditions components

* remove unused var

* complete tests for exception_item_card, excpetion_items, empty_viewer_state

* add test for useExceptionItemCard hook

* add tests for generateLinedRulesMenuItems

* add readme and index.md

* Update index.md

* remove unused file

* remove unused file

* add tests for Header_menu

* extract security mocks to a file

* test for header

* add missing tests

* fix tests

* fix text_with_edit dataTestSubj

* apply rewview comment

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
2022-10-19 19:33:17 +02:00
Wafaa Nasr
77867e162f
Exceptions List component (#140985)
* add components with a draft exception-list-details to test

* fix jest config in xPack=> security=> Public

* fix tests

* fix header test and use RTL

* covert meta test to use RTL and header

* fix utlity messageid

* fix messageid in utilty

* create osCondition, entryContent and entryContent.helper from Conditions.tsx

* comment test until fixing all

* create package with first components + test + jest config

* add constants for url

* [CI] Auto-commit changed files from 'node scripts/generate codeowners'

* disable tests until finishing moving rest of components or fix it+ add securityLinkAnchorComponent temp;

* add exceptionList-components +fixning build issues

* add exceptionList-components +fixning build issues

* fix translations id + pass comments as props

* move utiitly out of package until moving all + fixing css

* copy non-js/ts files through babel

* remove list-details-components

* apply comments

* apply comments in references

* fix meta tests

* update tests + add some descriptions

* fix camelcase file name in  Readme

* fix camelcase file name in  Readme

Co-authored-by: Kibana Machine <42973632+kibanamachine@users.noreply.github.com>
Co-authored-by: spalger <spencer@elastic.co>
2022-09-28 20:36:05 +02:00