diff --git a/packs/zscaler_zia.yml b/packs/zscaler_zia.yml index 5cea13ed8..1d7dc0402 100644 --- a/packs/zscaler_zia.yml +++ b/packs/zscaler_zia.yml @@ -6,7 +6,11 @@ PackDefinition: IDs: - ZIA.Account.Access.Removed - ZIA.Additional.Cloud.Roles + - ZIA.Backup.Deleted - ZIA.Cloud.Account.Created + - ZIA.Golden.Restore.Point.Dropped + - ZIA.Insecure.Password.Settings + - ZIA.Logs.Downloaded - ZIA.Password.Expiration - ZIA.Trust.Modification - panther_zscaler_helpers diff --git a/rules/zscaler_rules/zia/zia_golden_restore_point_dropped.py b/rules/zscaler_rules/zia/zia_golden_restore_point_dropped.py index b21f10af7..2d8409460 100644 --- a/rules/zscaler_rules/zia/zia_golden_restore_point_dropped.py +++ b/rules/zscaler_rules/zia/zia_golden_restore_point_dropped.py @@ -21,8 +21,8 @@ def rule(event): if ( action == "UPDATE" and category == "BACKUP_AND_RESTORE" - and golden_restore_point_pre == True - and golden_restore_point_post == False + and golden_restore_point_pre is True + and golden_restore_point_post is False ): return True return False diff --git a/rules/zscaler_rules/zia/zia_insecure_password_settings.py b/rules/zscaler_rules/zia/zia_insecure_password_settings.py index 7f9a1c53c..d637cad25 100644 --- a/rules/zscaler_rules/zia/zia_insecure_password_settings.py +++ b/rules/zscaler_rules/zia/zia_insecure_password_settings.py @@ -1,5 +1,4 @@ from panther_zscaler_helpers import zia_alert_context, zia_success -from pygments.lexer import default def rule(event):