Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update PasswordSprayingWithMDE.yaml #11455

Merged
merged 4 commits into from
Nov 21, 2024
Merged

Update PasswordSprayingWithMDE.yaml #11455

merged 4 commits into from
Nov 21, 2024

Conversation

ank0ku
Copy link
Contributor

@ank0ku ank0ku commented Nov 19, 2024

Change(s):

  • Removed entity mapping for Process as the referenced field "ProcessCommandLine" was not projected in this query.
  • Replaced "Timestamp" field in query with "TimeGenerated" to match the field present in DeviceLogonEvents table.

Reason for Change(s):

  • Faulty entity mapping and field mapping caused rule not to run.

Version Updated:

  • Yes, to 1.0.1

Testing Completed:

  • Yes

Checked that the validations are passing and have addressed any issues that are present:

  • Yes

@ank0ku
Update PasswordSprayingWithMDE.yaml
dc80790 
Removed entity mapping for Process as the referenced field was not projected in this query.
@ank0ku
Update PasswordSprayingWithMDE.yaml
fd1590c 
Updated Version to 1.0.1
@ank0ku ank0ku requested review from a team as code owners November 19, 2024 17:01
@v-prasadboke v-prasadboke self-assigned this Nov 21, 2024
@v-prasadboke v-prasadboke added the Solution Solution specialty review needed label Nov 21, 2024
@v-prasadboke v-prasadboke merged commit 6113380 into Azure:master Nov 21, 2024
36 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@v-prasadboke v-prasadboke v-prasadboke approved these changes

Assignees

@v-prasadboke v-prasadboke

Labels
Solution Solution specialty review needed
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ank0ku @v-prasadboke