ASIM Network Session schema parser with its sample and test data for SentinelOne

[jayeshprajapaticrest]

Required items, please complete

Change(s):

• Added ASIM Network Session schema parser for SentinelOne based on API Data

Reason for Change(s):

• Initial version ASIM Network Session Parser

Version Updated:

• Initial version

Testing Completed:

• Yes

Checked that the validations are passing and have addressed any issues that are present:

• Yes

[v-sudkharat]

Hello @jayeshprajapaticrest, thank you for raising Pull Request with us! We will review it internally and get back to you by shortly.

[vakohl]

ETA: for review by 18th Aug

[niralishah-crest]

@vakohl we have mapped the inspection fields below in the NetworkSession parser, which we found from SentinelOne Alerts logs.

ThreatConfidence
ThreatOriginalConfidence