Commit5f93815

committed

gis-9099 add microsoft sentinel to one vendor flow

1 parent532bf3d commit5f93815Copy full SHA for 5f93815

File tree

-3

lines changed

-3

lines changed

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -53,7 +53,7 @@`
`53`	`53`	`"group_id":"microsoft-defender",`
`54`	`54`	`}`
`55`	`55`
`56`		`-MICROSOFT_QUERY_TYPES= {_SENTINEL_KQL_QUERY,_SENTINEL_KQL_RULE}`
	`56`	`+MICROSOFT_SENTINEL_QUERY_TYPES= {_SENTINEL_KQL_QUERY,_SENTINEL_KQL_RULE}`
`57`	`57`
`58`	`58`	`microsoft_defender_query_details=PlatformDetails(**MICROSOFT_DEFENDER_DETAILS)`
`59`	`59`	`microsoft_sentinel_query_details=PlatformDetails(**MICROSOFT_SENTINEL_QUERY_DETAILS)`

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@`
`8`	`8`	`fromapp.translator.core.renderimportQueryRender`
`9`	`9`	`fromapp.translator.managersimportParserManager,RenderManager,parser_manager,render_manager`
`10`	`10`	`fromapp.translator.platforms.elasticsearch.constimportELASTIC_QUERY_TYPES`
`11`		`-fromapp.translator.platforms.microsoft.constimportMICROSOFT_QUERY_TYPES`
	`11`	`+fromapp.translator.platforms.microsoft.constimportMICROSOFT_SENTINEL_QUERY_TYPES`
`12`	`12`	`fromapp.translator.platforms.roota.parsers.rootaimportRootAParser`
`13`	`13`	`fromapp.translator.platforms.sigma.mappingimportsigma_rule_mappings`
`14`	`14`	`fromapp.translator.tools.decoratorsimporthandle_translation_exceptions`
`@@ -36,7 +36,7 @@ def __get_render(self, target: str) -> QueryRender:`
`36`	`36`
`37`	`37`	`@staticmethod`
`38`	`38`	`def__is_one_vendor_translation(source:str,target:str)->bool:`
`39`		`-vendors_query_types= [ELASTIC_QUERY_TYPES,MICROSOFT_QUERY_TYPES]`
	`39`	`+vendors_query_types= [ELASTIC_QUERY_TYPES,MICROSOFT_SENTINEL_QUERY_TYPES]`
`40`	`40`	`forvendor_query_typesinvendors_query_types:`
`41`	`41`	`ifsourceinvendor_query_typesandtargetinvendor_query_types:`
`42`	`42`	`returnTrue`

Comments

(0)