Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix 2021 10 01 validation errors #17937

Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -533,7 +533,8 @@
"items": {
"$ref": "#/definitions/ActionResponse"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -698,7 +699,8 @@
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object"
Expand Down Expand Up @@ -757,7 +759,8 @@
"items": {
"$ref": "#/definitions/AlertRule"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand All @@ -778,7 +781,8 @@
"items": {
"$ref": "#/definitions/AlertRuleTemplate"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -841,7 +845,8 @@
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"readOnly": true,
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"required": [
Expand Down Expand Up @@ -907,7 +912,8 @@
"items": {
"$ref": "#/definitions/AlertRuleTemplateDataSource"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"status": {
"$ref": "#/definitions/AlertRuleTemplateStatus",
Expand All @@ -923,7 +929,8 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object"
Expand Down Expand Up @@ -953,14 +960,16 @@
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"displayNamesExcludeFilter": {
"description": "the alerts' displayNames on which the cases will not be generated",
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"productFilter": {
"$ref": "#/definitions/MicrosoftSecurityProductName",
Expand All @@ -971,7 +980,8 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"required": [
Expand Down Expand Up @@ -1075,7 +1085,8 @@
"items": {
"$ref": "#/definitions/AlertRuleTemplateDataSource"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"status": {
"$ref": "#/definitions/AlertRuleTemplateStatus",
Expand All @@ -1087,14 +1098,16 @@
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"displayNamesExcludeFilter": {
"description": "the alerts' displayNames on which the cases will not be generated",
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"productFilter": {
"$ref": "#/definitions/MicrosoftSecurityProductName",
Expand All @@ -1105,7 +1118,8 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AlertSeverityEnum"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"required": [
Expand Down Expand Up @@ -1224,7 +1238,8 @@
"type": "array",
"items": {
"$ref": "#/definitions/EntityMapping"
}
},
"x-ms-identifiers": []
},
"EntityMapping": {
"description": "Single entity mapping for the alert rule",
Expand All @@ -1237,7 +1252,8 @@
"type": "array",
"items": {
"$ref": "#/definitions/FieldMapping"
}
},
"x-ms-identifiers": []
}
},
"type": "object"
Expand Down Expand Up @@ -1343,7 +1359,8 @@
"items": {
"$ref": "#/definitions/EntityMappingType"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"groupByAlertDetails": {
"description": "A list of alert details to group by (when matchingMethod is Selected)",
Expand All @@ -1369,14 +1386,16 @@
]
}
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"groupByCustomDetails": {
"description": "A list of custom details keys to group by (when matchingMethod is Selected). Only keys defined in the current alert rule may be used.",
"items": {
"type": "string"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -1431,7 +1450,8 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"incidentConfiguration": {
"$ref": "#/definitions/IncidentConfiguration",
Expand Down Expand Up @@ -1485,7 +1505,8 @@
"items": {
"$ref": "#/definitions/AlertRuleTemplateDataSource"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"status": {
"$ref": "#/definitions/AlertRuleTemplateStatus",
Expand Down Expand Up @@ -1524,7 +1545,8 @@
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"version": {
"description": "The version of this template - in format <a.b.c>, where all are numbers. For example <1.0.2>.",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -815,6 +815,7 @@
"value": {
"description": "Array of relations.",
"type": "array",
"x-ms-identifiers": [],
"items": {
"$ref": "#/definitions/Relation"
}
Expand Down Expand Up @@ -897,15 +898,17 @@
"type": "string"
},
"readOnly": true,
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"tactics": {
"description": "The tactics associated with incident",
"items": {
"$ref": "./common/AlertTypes.json#/definitions/AttackTactic"
},
"readOnly": true,
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object"
Expand All @@ -916,6 +919,7 @@
"value": {
"description": "Array of incident alerts.",
"type": "array",
"x-ms-identifiers": [],
"items": {
"$ref": "./common/EntityTypes.json#/definitions/SecurityAlert"
}
Expand All @@ -932,6 +936,7 @@
"value": {
"description": "Array of incident bookmarks.",
"type": "array",
"x-ms-identifiers": [],
"items": {
"$ref": "./common/EntityTypes.json#/definitions/HuntingBookmark"
}
Expand Down Expand Up @@ -971,7 +976,8 @@
"items": {
"$ref": "#/definitions/IncidentComment"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -1017,13 +1023,15 @@
"entities": {
"description": "Array of the incident related entities.",
"type": "array",
"x-ms-identifiers": [],
"items": {
"$ref": "./common/EntityTypes.json#/definitions/Entity"
}
},
"metaData": {
"description": "The metadata from the incident related entities results.",
"type": "array",
"x-ms-identifiers": [],
"items": {
"$ref": "#/definitions/IncidentEntitiesResultsMetadata"
}
Expand Down Expand Up @@ -1062,7 +1070,8 @@
"items": {
"$ref": "#/definitions/Incident"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
}
},
"type": "object",
Expand Down Expand Up @@ -1201,7 +1210,8 @@
"items": {
"$ref": "./common/IncidentTypes.json#/definitions/IncidentLabel"
},
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"lastActivityTimeUtc": {
"description": "The time of the last activity in the incident",
Expand All @@ -1226,7 +1236,8 @@
"type": "string"
},
"readOnly": true,
"type": "array"
"type": "array",
"x-ms-identifiers": []
},
"severity": {
"description": "The severity of the incident",
Expand Down
Loading