Commit94e7de5

committed

gis-9071 add mapping to falco

1 parentf9d39b5 commit94e7de5Copy full SHA for 94e7de5

File tree

+10

-2

lines changed

uncoder-core/app/translator
- mappings/platforms/falco
  - aws_cloudtrail.yml
- platforms/falco
  - mapping.py

+10

-2

lines changed

Lines changed: 8 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,8 @@`
	`1`	`+platform:Falco`
	`2`	`+source:aws_cloudtrail`
	`3`	`+`
	`4`	`+field_mapping:`
	`5`	`+eventSource:ct.src`
	`6`	`+eventName:ct.name`
	`7`	`+errorCode:ct.error`
	`8`	`+RequestParameters:json.value[/requestParameters]`

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-fromapp.translator.core.mappingimportBasePlatformMappings,LogSourceSignature`
	`1`	`+fromapp.translator.core.mappingimportBaseStrictLogSourcesPlatformMappings,LogSourceSignature`
`2`	`2`	`fromapp.translator.platforms.falco.constimportfalco_rule_details`
`3`	`3`
`4`	`4`
`@@ -10,7 +10,7 @@ def is_suitable(self) -> bool:`
`10`	`10`	`returnTrue`
`11`	`11`
`12`	`12`
`13`		`-classFalcoRuleMappings(BasePlatformMappings):`
	`13`	`+classFalcoRuleMappings(BaseStrictLogSourcesPlatformMappings):`
`14`	`14`	`defprepare_log_source_signature(self,mapping:dict)->FalcoRuleLogSourceSignature:# noqa: ARG002`
`15`	`15`	`returnFalcoRuleLogSourceSignature()`
`16`	`16`

Comments

(0)