Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[ECS] Update SEI packages to ECS 8.8 (Part 4) #6328

Merged
merged 36 commits into from
Jun 5, 2023
Merged

[ECS] Update SEI packages to ECS 8.8 (Part 4) #6328

merged 36 commits into from
Jun 5, 2023

Conversation

taylor-swanson
Copy link
Contributor

@taylor-swanson taylor-swanson commented May 25, 2023 •
edited
Loading

What does this PR do?

Note: This PR only updates the ECS version of the selected packages. If additional work is needed to align a package to a new feature provided by ECS, it will be handled in a separate PR.

Updates the following SEI packages to ECS 8.8:

  • squid
  • suricata
  • symantec_endpoint
  • sysmon_linux
  • system_audit
  • tanium
  • tcp
  • tenable_io
  • tenable_sc
  • thycotic_ss
  • ti_abusech
  • ti_anomali
  • ti_cif3
  • ti_cybersixgill
  • ti_misp
  • ti_otx
  • ti_rapid7_threat_command
  • ti_recordedfuture
  • ti_threatq
  • tines
  • trellix_epo_cloud
  • trend_micro_vision_one
  • trendmicro
  • udp
  • vectra_detect
  • winlog
  • zeek
  • zerofox
  • zeronetworks
  • zoom
  • zscaler_zia
  • zscaler_zpa

Changes generated by:

ecs-update -owner elastic/security-external-integrations -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr 6328 packages/<PACKAGE>

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.

Related issues

@taylor-swanson
[squid] - update ECS to 8.8.0 from 8.7.0
e1b10ab 
This updates the squid integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/squid
@taylor-swanson
[suricata] - update ECS to 8.8.0 from 8.7.0
fc949c2 
This updates the suricata integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/suricata
@taylor-swanson
[symantec_endpoint] - update ECS to 8.8.0 from 8.7.0
7616b06 
This updates the symantec_endpoint integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/symantec_endpoint
@taylor-swanson
[sysmon_linux] - update ECS to 8.8.0 from 8.7.0
ce908c9 
This updates the sysmon_linux integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/sysmon_linux
@taylor-swanson
[system_audit] - update ECS to 8.8.0 from 8.7.0
07785f6 
This updates the system_audit integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/system_audit
@taylor-swanson
[tanium] - update ECS to 8.8.0 from 8.7.0
0b7d6eb 
This updates the tanium integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tanium
@taylor-swanson
[tcp] - update ECS to 8.8.0
d386395 
This updates the tcp integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tcp
@taylor-swanson
[tenable_io] - update ECS to 8.8.0 from 8.7.0
98d9a36 
This updates the tenable_io integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tenable_io
@taylor-swanson
[tenable_sc] - update ECS to 8.8.0 from 8.7.0
d323181 
This updates the tenable_sc integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tenable_sc
@taylor-swanson
[thycotic_ss] - update ECS to 8.8.0 from 8.7.0
65ea5fb 
This updates the thycotic_ss integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/thycotic_ss
@taylor-swanson
[ti_abusech] - update ECS to 8.8.0 from 8.7.0
f902e0b 
This updates the ti_abusech integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_abusech
@taylor-swanson
[ti_anomali] - update ECS to 8.8.0 from 8.7.0
4d07e4b 
This updates the ti_anomali integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_anomali
@taylor-swanson
[ti_cif3] - update ECS to 8.8.0 from 8.7.0
64c0365 
This updates the ti_cif3 integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_cif3
@taylor-swanson
[ti_cybersixgill] - update ECS to 8.8.0 from 8.7.0
f954ba4 
This updates the ti_cybersixgill integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_cybersixgill
@taylor-swanson
[ti_misp] - update ECS to 8.8.0 from 8.7.0
8520911 
This updates the ti_misp integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0, 8.4.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_misp
@taylor-swanson
[ti_otx] - update ECS to 8.8.0 from 8.7.0
24d9627 
This updates the ti_otx integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_otx
@taylor-swanson
[ti_rapid7_threat_command] - update ECS to 8.8.0 from 8.7.0
e314edd 
This updates the ti_rapid7_threat_command integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_rapid7_threat_command
@taylor-swanson
[ti_recordedfuture] - update ECS to 8.8.0 from 8.7.0
f0d617a 
This updates the ti_recordedfuture integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_recordedfuture
@taylor-swanson
[ti_threatq] - update ECS to 8.8.0 from 8.7.0
631d41d 
This updates the ti_threatq integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/ti_threatq
@taylor-swanson
[tines] - update ECS to 8.8.0
de6a9f3 
This updates the tines integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/tines
@taylor-swanson
[trellix_epo_cloud] - update ECS to 8.8.0 from 8.7.0
1781110 
This updates the trellix_epo_cloud integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/trellix_epo_cloud
@taylor-swanson
[trend_micro_vision_one] - update ECS to 8.8.0 from 8.7.0
c8ec8b2 
This updates the trend_micro_vision_one integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/trend_micro_vision_one
@taylor-swanson
[trendmicro] - update ECS to 8.8.0 from 8.7.0
0a68302 
This updates the trendmicro integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/trendmicro
@taylor-swanson
[udp] - update ECS to 8.8.0
a331ce3 
This updates the udp integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/udp
@taylor-swanson
[vectra_detect] - update ECS to 8.8.0 from 8.7.0
dbf5569 
This updates the vectra_detect integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/vectra_detect
@taylor-swanson
[winlog] - update ECS to 8.8.0
8970969 
This updates the winlog integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/winlog
@taylor-swanson
[zeek] - update ECS to 8.8.0 from 8.7.0
a184659 
This updates the zeek integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/zeek
@taylor-swanson
[zerofox] - update ECS to 8.8.0 from 8.7.0
ce6740f 
This updates the zerofox integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and using 8.7.0 in ingest pipelines.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/zerofox
@taylor-swanson
[zeronetworks] - update ECS to 8.8.0
d2cbd13 
This updates the zeronetworks integration to ECS 8.8.0.
It was referencing elastic/ecs [email protected] and no pipelines set ecs.version.

[git-generate]
go run github.com/andrewkroh/go-examples/ecs-update@latest -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr=6328 packages/zeronetworks
@elasticmachine
Copy link

Package sysmon_linux - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=sysmon_linux

@elasticmachine
Copy link

Package system_audit - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=system_audit

@elasticmachine
Copy link

Package tanium - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=tanium

@elasticmachine
Copy link

Package tcp - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=tcp

@elasticmachine
Copy link

Package tenable_io - 0.8.0 containing this change is available at https://epr.elastic.co/search?package=tenable_io

@elasticmachine
Copy link

Package tenable_sc - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=tenable_sc

@elasticmachine
Copy link

Package thycotic_ss - 0.3.0 containing this change is available at https://epr.elastic.co/search?package=thycotic_ss

@elasticmachine
Copy link

Package ti_abusech - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=ti_abusech

@elasticmachine
Copy link

Package ti_anomali - 1.13.0 containing this change is available at https://epr.elastic.co/search?package=ti_anomali

@elasticmachine
Copy link

Package ti_cif3 - 0.7.0 containing this change is available at https://epr.elastic.co/search?package=ti_cif3

@elasticmachine
Copy link

Package ti_cybersixgill - 1.12.0 containing this change is available at https://epr.elastic.co/search?package=ti_cybersixgill

@elasticmachine
Copy link

Package ti_misp - 1.15.0 containing this change is available at https://epr.elastic.co/search?package=ti_misp

@elasticmachine
Copy link

Package ti_otx - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=ti_otx

@elasticmachine
Copy link

Package ti_rapid7_threat_command - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=ti_rapid7_threat_command

@elasticmachine
Copy link

Package ti_recordedfuture - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=ti_recordedfuture

@elasticmachine
Copy link

Package ti_threatq - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=ti_threatq

@elasticmachine
Copy link

Package tines - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=tines

@elasticmachine
Copy link

Package trellix_epo_cloud - 0.2.0 containing this change is available at https://epr.elastic.co/search?package=trellix_epo_cloud

@elasticmachine
Copy link

Package trend_micro_vision_one - 1.3.0 containing this change is available at https://epr.elastic.co/search?package=trend_micro_vision_one

@elasticmachine
Copy link

Package trendmicro - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=trendmicro

@elasticmachine
Copy link

Package udp - 1.10.0 containing this change is available at https://epr.elastic.co/search?package=udp

@elasticmachine
Copy link

Package vectra_detect - 0.4.0 containing this change is available at https://epr.elastic.co/search?package=vectra_detect

@elasticmachine
Copy link

Package winlog - 1.16.0 containing this change is available at https://epr.elastic.co/search?package=winlog

@elasticmachine
Copy link

Package zeek - 2.9.0 containing this change is available at https://epr.elastic.co/search?package=zeek

@elasticmachine
Copy link

Package zerofox - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=zerofox

@elasticmachine
Copy link

Package zeronetworks - 0.3.0 containing this change is available at https://epr.elastic.co/search?package=zeronetworks

@elasticmachine
Copy link

Package zoom - 1.11.0 containing this change is available at https://epr.elastic.co/search?package=zoom

@elasticmachine
Copy link

Package zscaler_zia - 2.10.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zia

@elasticmachine
Copy link

Package zscaler_zpa - 1.8.0 containing this change is available at https://epr.elastic.co/search?package=zscaler_zpa

sodhikirti07 pushed a commit that referenced this pull request Jun 15, 2023
@taylor-swanson @sodhikirti07
[ECS] Update SEI packages to ECS 8.8 (Part 4) (#6328)
337e42b 
Updates the following SEI packages to ECS 8.8:

- squid
- suricata
- symantec_endpoint
- sysmon_linux
- system_audit
- tanium
- tcp
- tenable_io
- tenable_sc
- thycotic_ss
- ti_abusech
- ti_anomali
- ti_cif3
- ti_cybersixgill
- ti_misp
- ti_otx
- ti_rapid7_threat_command
- ti_recordedfuture
- ti_threatq
- tines
- trellix_epo_cloud
- trend_micro_vision_one
- trendmicro
- udp
- vectra_detect
- winlog
- zeek
- zerofox
- zeronetworks
- zoom
- zscaler_zia
- zscaler_zpa

Changes generated by:

ecs-update -owner elastic/security-external-integrations -ecs-version=8.8.0 -ecs-git-ref=8.8 -pr 6328 packages/<PACKAGE>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kgeller kgeller kgeller approved these changes

Assignees

@taylor-swanson taylor-swanson

Labels
enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@taylor-swanson @elasticmachine @kgeller