Skip to content

Commit

Permalink
fix(PaloAlto): add a missing smart-description
Browse files Browse the repository at this point in the history
  • Loading branch information
squioc committed Jun 4, 2024
1 parent 98a9722 commit 32583ca
Showing 1 changed file with 22 additions and 0 deletions.
22 changes: 22 additions & 0 deletions Palo Alto Networks/paloalto-ngfw/_meta/smart-descriptions.json
Original file line number Diff line number Diff line change
Expand Up @@ -155,6 +155,28 @@
}
]
},
{
"value": "{event.action} threat between {source.nat.ip} and {destination.nat.ip}",
"conditions": [
{
"field": "log.logger",
"value": "threat"
},
{
"field": "source.nat.ip"
},
{
"field": "destination.nat.ip"
}
],
"relationships": [
{
"source": "source.ip",
"target": "destination.ip",
"type": "connected to"
}
]
},
{
"value": "{log.logger} type {paloalto.PanOSThreatID} detected from {source.ip} user {user.name} to {destination.ip}:{destination.port} targeting host {host.name}",
"conditions": [
Expand Down

0 comments on commit 32583ca

Please sign in to comment.