Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

tuning Wiz Alert Passthrough rule #1326

Merged
merged 4 commits into from
Aug 21, 2024
Merged

tuning Wiz Alert Passthrough rule #1326

merged 4 commits into from
Aug 21, 2024

Conversation

arielkr256
Copy link
Contributor

Background

Tuning Wiz alert passthrough rule for better severity and dedup

Changes

  • Wiz's INFORMATIONAL severity does not map to Panther's INFO severity, added logic to handle that
  • Dedup on entitySnapshot.externalId for better grouping of alerts for the same resource

Testing

  • pat test

@arielkr256 arielkr256 requested a review from a team as a code owner August 14, 2024 18:51
@github-actions GitHub Actions
Copy link

😱
looks like some things could be wrong with the packs

[INFO][root]: ignoring file dependabot.yml

@ben-githubs ben-githubs merged commit 3ee6ad2 into release Aug 21, 2024
6 checks passed
@ben-githubs ben-githubs deleted the wiz-passthrough-tuning branch August 21, 2024 21:36
@arielkr256 arielkr256 added the tuning detection tuning label Sep 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ben-githubs ben-githubs ben-githubs approved these changes

Assignees
No one assigned
Labels
tuning detection tuning
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@arielkr256 @ben-githubs