ASIM Process Event schema parser with its sample and test data for SentinelOne#8669

Merged

v-atulyadav merged 12 commits intoAzure:masterfrom jayeshprajapaticrest:SentinelOneProcess

Sep 27, 2023

+6,763-3

Commits on Jul 30, 2023

ASIM Process Event schema parser with its sample and test data for SentinelOne.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed
Fixed Kqlvalidation by correcting unifying parser name.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed

Commits on Aug 24, 2023

Fixed the suggested review1 changes and added RAW log files for sentinel one.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed

Commits on Aug 25, 2023

Fixed the Unifying parser relateed issue.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed

Commits on Aug 28, 2023

Updated imProcess.yaml file by following same structure as imDns and updated parameter name in vimProcessSentinelOne as per unifying parser.
jayeshprajapaticrest
committed

Commits on Aug 29, 2023

Fixed the validation error by removing extra comma.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed

Commits on Aug 31, 2023

Fixed the KqlValidation error by correcting the ASIM parser name in unifying.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed

Commits on Sep 18, 2023

Updated parser by adding inspection fields, added EventProduct and Event Vender in tester file and updated sample data as per change.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed
Resolved Merge COnflicts.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed

Commits on Sep 22, 2023

Resolved conflicts by taking pull from master branch.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed
Merge branch 'master' into pr/8669
v-atulyadav
committed

Commits on Sep 26, 2023

Corrected the sequence of filters to fix the validation error.

Jayesh Prajapati
authored and
Jayesh Prajapati
committed