Add additional panther_config modules to Packs (#1042)

panther-labs · Dec 14, 2023 · 48a851e · 48a851e
1 parent aea6bb2
commit 48a851e
Show file tree

Hide file tree

Showing 31 changed files with 62 additions and 0 deletions.
diff --git a/packs/asana.yml b/packs/asana.yml
@@ -17,4 +17,6 @@ PackDefinition:
     - panther_asana_helpers
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther Asana Pack"
diff --git a/packs/atlassian.yml b/packs/atlassian.yml
@@ -7,4 +7,6 @@ PackDefinition:
     # Globals used in these detections
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther Atlassian Pack"
diff --git a/packs/auth0.yml b/packs/auth0.yml
@@ -18,4 +18,6 @@ PackDefinition:
     - panther_auth0_helpers
     - global_filter_auth0
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther Auth0 Pack"
diff --git a/packs/aws.yml b/packs/aws.yml
@@ -146,3 +146,5 @@ PackDefinition:
     - panther_lookuptable_helpers
     - panther_oss_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/aws_cis.yml b/packs/aws_cis.yml
@@ -39,4 +39,6 @@ PackDefinition:
     - panther_base_helpers
     - panther_oss_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther AWS CIS Pack"
diff --git a/packs/azure_signin.yml b/packs/azure_signin.yml
@@ -11,4 +11,6 @@ PackDefinition:
     - panther_azuresignin_helpers
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther Azure.Audit SignIn Pack"
diff --git a/packs/cloudflare.yml b/packs/cloudflare.yml
@@ -15,3 +15,5 @@ PackDefinition:
     - panther_lookuptable_helpers
     - global_filter_cloudflare
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/credential_security.yml b/packs/credential_security.yml
@@ -17,6 +17,8 @@ PackDefinition:
     - panther_default
     - panther_event_type_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
     # Rules
     - AWS.CloudTrail.RootPasswordChanged
     - AWS.IAM.AccessKeyCompromised

diff --git a/packs/crowdstrike.yml b/packs/crowdstrike.yml
@@ -22,6 +22,8 @@ PackDefinition:
     # Globals used in these detections
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
     # Data models
     - Standard.Crowdstrike.FDR
 DisplayName: "Panther Crowdstrike Pack"
diff --git a/packs/duo.yml b/packs/duo.yml
@@ -23,3 +23,5 @@ PackDefinition:
     - panther_base_helpers
     - panther_duo_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/gcp_audit.yml b/packs/gcp_audit.yml
@@ -40,4 +40,6 @@ PackDefinition:
     - gcp_base_helpers
     - gcp_environment
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther GCP Audit Pack"
diff --git a/packs/github.yml b/packs/github.yml
@@ -31,3 +31,5 @@ PackDefinition:
     - panther_oss_helpers
     - global_filter_github
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/gravitational_teleport.yml b/packs/gravitational_teleport.yml
@@ -11,4 +11,6 @@ PackDefinition:
     # Globals used in these detections
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther Teleport Pack"
diff --git a/packs/greynoise_advanced.yml b/packs/greynoise_advanced.yml
@@ -9,4 +9,6 @@ PackDefinition:
     - panther_greynoise_helpers
     - panther_lookuptable_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "GreyNoise Advanced"
diff --git a/packs/greynoise_basic.yml b/packs/greynoise_basic.yml
@@ -9,4 +9,6 @@ PackDefinition:
     - panther_greynoise_helpers
     - panther_lookuptable_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "GreyNoise Basic"
diff --git a/packs/ipinfo.yml b/packs/ipinfo.yml
@@ -13,4 +13,6 @@ PackDefinition:
     - panther_ipinfo_helpers
     - panther_lookuptable_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "IPInfo"
diff --git a/packs/mongodb.yml b/packs/mongodb.yml
@@ -9,3 +9,5 @@ PackDefinition:
     # Globals
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/notion.yml b/packs/notion.yml
@@ -21,6 +21,8 @@ PackDefinition:
     - panther_notion_helpers
     - global_filter_notion
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
     # Data Model
     - Standard.Notion.AuditLogs
 DisplayName: "Panther Notion Pack"
diff --git a/packs/okta.yml b/packs/okta.yml
@@ -30,6 +30,8 @@ PackDefinition:
     - panther_oss_helpers
     - panther_event_type_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
     # Data Model
     - Standard.Okta.SystemLog
 DisplayName: "Panther Okta Pack"
diff --git a/packs/onelogin.yml b/packs/onelogin.yml
@@ -18,4 +18,6 @@ PackDefinition:
     - panther_base_helpers
     - panther_oss_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther OneLogin Pack"
diff --git a/packs/onepassword.yml b/packs/onepassword.yml
@@ -12,3 +12,5 @@ PackDefinition:
     - panther_base_helpers
     - panther_event_type_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/osquery.yml b/packs/osquery.yml
@@ -17,4 +17,6 @@ PackDefinition:
     # Globals used in these detections
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther OSQuery Pack"
diff --git a/packs/panther.yml b/packs/panther.yml
@@ -13,4 +13,6 @@ PackDefinition:
     - panther_base_helpers
     - panther_event_type_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther Audit Logs Pack"
diff --git a/packs/sentinelone.yml b/packs/sentinelone.yml
@@ -8,4 +8,6 @@ PackDefinition:
     # Globals used in these detections
     - panther_base_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther SentinelOne Pack"
diff --git a/packs/slack.yml b/packs/slack.yml
@@ -30,3 +30,5 @@ PackDefinition:
     - panther_base_helpers
     - panther_oss_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/snyk.yml b/packs/snyk.yml
@@ -19,3 +19,5 @@ PackDefinition:
     - panther_base_helpers
     - panther_snyk_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/tailscale.yml b/packs/tailscale.yml
@@ -11,4 +11,6 @@ PackDefinition:
     - panther_tailscale_helpers
     - global_filter_tailscale
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Panther Tailscale Pack"
diff --git a/packs/tines.yml b/packs/tines.yml
@@ -17,3 +17,5 @@ PackDefinition:
     - panther_base_helpers
     - panther_tines_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/tor.yml b/packs/tor.yml
@@ -8,4 +8,6 @@ PackDefinition:
     - panther_lookuptable_helpers
     - panther_tor_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
 DisplayName: "Tor Lookup Tables"
diff --git a/packs/zendesk.yml b/packs/zendesk.yml
@@ -17,3 +17,5 @@ PackDefinition:
     - panther_base_helpers
     - panther_event_type_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides
diff --git a/packs/zoom.yml b/packs/zoom.yml
@@ -19,3 +19,5 @@ PackDefinition:
     - panther_oss_helpers
     - panther_zoom_helpers
     - panther_config
+    - panther_config_defaults
+    - panther_config_overrides