fix: lookuptables base class needs to be in the pack.yml for all arti…

…facts that leverage it (#821) * fix: lookuptables base class needs to be in the pack.yml for all artifacts that leverage the lookuptables base class * fix: aws pack included a greynoise importing rule --------- Co-authored-by: calkim-panther <[email protected]>
panther-labs · Jun 20, 2023 · 9b43d82 · 9b43d82
1 parent 4ba3456
commit 9b43d82
Show file tree

Hide file tree

Showing 8 changed files with 14 additions and 6 deletions.
diff --git a/packs/asana.yml b/packs/asana.yml
@@ -14,5 +14,6 @@ PackDefinition:
     - Asana.Workspace.Password.Requirements.Simple
     - Asana.Workspace.Org.Export
     # Globals used in these detections
+    - panther_asana_helpers
     - panther_base_helpers
 DisplayName: "Panther Asana Pack"
diff --git a/packs/aws.yml b/packs/aws.yml
@@ -136,6 +136,8 @@ PackDefinition:
     - Standard.AWS.VPCFlow
     # Globals used in these rules/policies
     - panther_base_helpers
+    - panther_default
     - panther_event_type_helpers
+    - panther_greynoise_helpers
+    - panther_lookuptable_helpers
     - panther_oss_helpers
-    - panther_default
diff --git a/packs/cloudflare.yml b/packs/cloudflare.yml
@@ -10,5 +10,6 @@ PackDefinition:
     - Cloudflare.HttpRequest.BotHighVolumeGreyNoise
     # Globals used in these rules/policies
     - panther_cloudflare_helpers
-    - global_filter_cloudflare
     - panther_greynoise_helpers
+    - panther_lookuptable_helpers
+    - global_filter_cloudflare
diff --git a/packs/github.yml b/packs/github.yml
@@ -26,7 +26,7 @@ PackDefinition:
     # Data model
     - Standard.Github.Audit
     # Globals
-    - panther_event_type_helpers
     - panther_base_helpers
+    - panther_event_type_helpers
     - panther_oss_helpers
     - global_filter_github
diff --git a/packs/greynoise_advanced.yml b/packs/greynoise_advanced.yml
@@ -5,6 +5,7 @@ PackDefinition:
   IDs:
     - greynoise_noise_advanced
     - greynoise_riot_advanced
-    - panther_greynoise_helpers
     - panther_base_helpers
+    - panther_greynoise_helpers
+    - panther_lookuptable_helpers
 DisplayName: "GreyNoise Advanced"
diff --git a/packs/greynoise_basic.yml b/packs/greynoise_basic.yml
@@ -5,6 +5,7 @@ PackDefinition:
   IDs:
     - greynoise_noise_basic
     - greynoise_riot_basic
-    - panther_greynoise_helpers
     - panther_base_helpers
+    - panther_greynoise_helpers
+    - panther_lookuptable_helpers
 DisplayName: "GreyNoise Basic"
diff --git a/packs/ipinfo.yml b/packs/ipinfo.yml
@@ -11,4 +11,5 @@ PackDefinition:
     - ipinfo_privacy_datalake
     - panther_ipinfo_helpers
     - panther_base_helpers
+    - panther_lookuptable_helpers
 DisplayName: "IPInfo"
diff --git a/packs/tor.yml b/packs/tor.yml
@@ -4,6 +4,7 @@ Description: Panther managed Tor Exit Nodes lookup table
 PackDefinition:
   IDs:
     - tor_exit_nodes
-    - panther_tor_helpers
     - panther_base_helpers
+    - panther_lookuptable_helpers
+    - panther_tor_helpers
 DisplayName: "Tor Lookup Tables"