From e629925e7198f52b31a25bcf79968534c504f08c Mon Sep 17 00:00:00 2001 From: lihiatzmoni1 Date: Tue, 17 Oct 2023 14:17:24 +0300 Subject: [PATCH] example data --- .../Custom/SeraphicWebSecurity_CL.json | 205 ++++++++++++++++++ 1 file changed, 205 insertions(+) create mode 100644 Sample Data/Custom/SeraphicWebSecurity_CL.json diff --git a/Sample Data/Custom/SeraphicWebSecurity_CL.json b/Sample Data/Custom/SeraphicWebSecurity_CL.json new file mode 100644 index 00000000000..a3b71170832 --- /dev/null +++ b/Sample Data/Custom/SeraphicWebSecurity_CL.json @@ -0,0 +1,205 @@ +[ + { + "id":"", + "log_type": "alert", + "action": null, + "host_id": "", + "sid": "", + "client_ts": "2023-10-05T09:26:20.011Z", + "receive_ts": "2023-10-05T09:26:20.011Z", + "payload": { + "url": "https://example.com/", + "ruleID": 1, + "jsonPayload": { + "eventName": "dlpViolation", + "action": "paste", + "results": [ + { + "name": "Cpp Source Code", + "matches": 1, + "regex": null + }, + { + "name": "C Source Code", + "matches": 1, + "regex": null + }, + { + "name": "C Sharp Source Code", + "matches": 1, + "regex": null + } + ], + "contextLocation": "https://example.com", + "contextReferer": "", + "ruleID": 1, + "message": "Company policy restricts upload of source code into generative AI applications. Please refrain from using sensitive information in such applications or reach out to your helpdesk for assistance.", + "tab_details": { + "active": true, + "audible": false, + "autoDiscardable": true, + "discarded": false, + "favIconUrl": "", + "groupId": -1, + "height": 955, + "highlighted": true, + "id": 538278537, + "incognito": false, + "index": 3, + "mutedInfo": { + "muted": false + }, + "pinned": false, + "selected": true, + "status": "complete", + "title": "Example", + "url": "https://example.com/", + "width": 1920, + "windowId": 538278526 + }, + "url": "https://example.com/", + "sourceIPS": "", + "classification": "technology/computers/hardware", + "url_host": "", + "url_protocol": "https:", + "url_path": "/", + "url_port": 443, + "host_ip": "", + "internalHost": false + }, + "implant_data": { + "os_name": "Windows", + "os_version": "11", + "application_name": "Chrome", + "architecture": 64, + "application_version": "117.0.5938.132", + "ext_version": "2.0.1.7721", + "cpu_count": 12, + "email": "alonle@seraphic-alg.io", + "is_workspace": true, + "ram": "31.38 GB", + "disk": "OS - 950.91 GB", + "displays": "1200 - 1920,1080 - 1920", + "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36", + "ips": "" + }, + "ip": "", + "internalHost": false + }, + "archived": false, + "url": "https://example.com/", + "domain": "example.com", + "rule_id": 1, + "rule_ids": [], + "ip": "", + "internal_host": false, + "referer": "", + "artifact_type": "SeraphicWorkspace", + "computer_name": "", + "hostname": "", + "username": "alonle@seraphic-alg.io", + "application": "Chrome", + "os_name": "Windows", + "os_version": "11", + "browser_version": "117.0.5938.132", + "platform": "windows", + "alert_type_id": "18", + "alert_type_name": "dlp violation", + "severity": 2 + }, + { + "id":"", + "log_type": "event", + "host_id": "", + "sid": "", + "client_ts": "2023-10-05T14:16:04.296Z", + "receive_ts": "2023-10-05T14:16:04.296Z", + "payload": { + "url": "https://example.com/", + "ruleID": 2, + "jsonPayload": { + "eventName": "pageNavigation", + "documentId": "540F1D755C740CF0A67B3B3DCB0E0FDE", + "documentLifecycle": "active", + "frameId": 0, + "frameType": "outermost_frame", + "parentFrameId": -1, + "processId": 597, + "tabId": 538278685, + "timeStamp": 1696515361190.736, + "url": "https://example.com/", + "ruleID": 2, + "tab_details": { + "active": true, + "audible": false, + "autoDiscardable": true, + "discarded": false, + "favIconUrl": "https://example.com/favicon.ico", + "groupId": -1, + "height": 1075, + "highlighted": true, + "id": 538278685, + "incognito": false, + "index": 34, + "mutedInfo": { + "muted": false + }, + "pinned": false, + "selected": true, + "status": "loading", + "title": "Example", + "url": "https://example.com/", + "width": 1920, + "windowId": 538278316 + }, + "contextReferer": "https://example.com", + "sourceIPS": "", + "classification": "Uncategorized", + "url_host": "example.com", + "url_protocol": "https:", + "url_path": "/", + "url_port": 443, + "host_ip": "", + "internalHost": false + }, + "implant_data": { + "os_name": "Windows", + "os_version": "11", + "application_name": "Chrome", + "architecture": 64, + "application_version": "117.0.5938.132", + "ext_version": "2.0.1.7721", + "cpu_count": 12, + "email": "alonle@seraphic-alg.io", + "is_workspace": true, + "ram": "31.38 GB", + "disk": "OS - 950.91 GB", + "displays": "1200 - 1920", + "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36", + "ips": "" + }, + "ip": "", + "internalHost": false + }, + "archived": false, + "url": "https://example.com/", + "event_sub_type": null, + "rule_id": 2, + "rule_ids": [], + "ip": "", + "internal_host": false, + "in_pac_bypass_list": null, + "artifact_type": "SeraphicWorkspace", + "computer_name": "", + "hostname": "", + "username": "alonle@seraphic-alg.io", + "application": "Chrome", + "os_name": "Windows", + "os_version": "11", + "browser_version": "117.0.5938.132", + "platform": "windows", + "event_type_id": 7, + "event_type_name": "page navigation", + "action": null + } +] \ No newline at end of file