Skip to content

Adding new workbook, custom tables, data connector and analytic rules… #12963

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
seanmacdonald8 wants to merge 34 commits into from
Closed

Adding new workbook, custom tables, data connector and analytic rules… #12963

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
34 commits
Select commit Hold shift + click to select a range
b78874b
Adding new workbook, custom tables, data connector and analytic rules…
seanmacdonald8 Oct 15, 2025
51ca3fd
added to solution file
dylan-o-sullivan Oct 23, 2025
f27524f
updated version to 3.0.0
dylan-o-sullivan Oct 23, 2025
fa3cfc0
updated sample desc
dylan-o-sullivan Oct 23, 2025
aaf5651
removed references
dylan-o-sullivan Oct 28, 2025
8497d4e
replaced logo
dylan-o-sullivan Oct 28, 2025
f82b26d
added sanitized sample data
dylan-o-sullivan Nov 7, 2025
c21dc4c
Merge pull request #57 from darktrace/dylan/darktrace-li-work
seanmacdonald8 Nov 7, 2025
d006cbe
Merge branch 'Azure:master' into darktrace-li-api
seanmacdonald8 Nov 7, 2025
24be68b
added custom tables
dylan-o-sullivan Nov 10, 2025
f5eff17
updated metadata
dylan-o-sullivan Nov 10, 2025
0ffe216
wrap in array
dylan-o-sullivan Nov 10, 2025
bc6acaa
Merge pull request #58 from darktrace/dylan/darktrace-li-work
seanmacdonald8 Nov 11, 2025
3b1aa61
changed connector id
dylan-o-sullivan Nov 13, 2025
6658236
sanitize email
dylan-o-sullivan Nov 13, 2025
662596f
refer to new api
dylan-o-sullivan Jan 12, 2026
af7d11b
added outputs [NEED TO SET VARIABLES]
dylan-o-sullivan Jan 13, 2026
21d21cc
added resources
dylan-o-sullivan Jan 13, 2026
b9c7e25
changed naming
dylan-o-sullivan Jan 13, 2026
4f3cd36
update step
dylan-o-sullivan Jan 13, 2026
7040597
more steps
dylan-o-sullivan Jan 13, 2026
77bd4b5
removed stapi as no rule yet
dylan-o-sullivan Jan 13, 2026
2305f4b
incident events
dylan-o-sullivan Jan 15, 2026
9a0a6b5
grammar
dylan-o-sullivan Jan 15, 2026
0efd522
sanitize email
dylan-o-sullivan Jan 15, 2026
8542526
solution validations
dylan-o-sullivan Jan 15, 2026
00f3fe5
Merge pull request #60 from darktrace/dylan/darktrace-li-work
seanmacdonald8 Jan 15, 2026
fd18c38
updated working ui def and template
dylan-o-sullivan Jan 20, 2026
1130af7
removed blanks
dylan-o-sullivan Jan 20, 2026
213d65f
revert
dylan-o-sullivan Jan 20, 2026
8910048
Merge pull request #61 from darktrace/dylan/darktrace-li-work
seanmacdonald8 Jan 20, 2026
7d38675
removed default value
dylan-o-sullivan Jan 21, 2026
b71baf8
added tables
dylan-o-sullivan Jan 21, 2026
57f8acb
Merge pull request #62 from darktrace/dylan/darktrace-li-work
dylan-o-sullivan Jan 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
89 changes: 89 additions & 0 deletions .script/tests/KqlvalidationsTests/CustomTables/DarktraceASM_CL.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,89 @@
{
"Name": "DarktraceASM_CL",
"Properties": [
{
"name": "action",
"type": "string"
},
{
"name": "alertTime",
"type": "datetime"
},
{
"name": "alertTimestamp",
"type": "int"
},
{
"name": "alertTitle",
"type": "string"
},
{
"name": "alertType",
"type": "string"
},
{
"name": "assetId",
"type": "int"
},
{
"name": "assetName",
"type": "string"
},
{
"name": "assetUri",
"type": "string"
},
{
"name": "customLabel",
"type": "string"
},
{
"name": "darktraceProduct",
"type": "string"
},
{
"name": "description",
"type": "string"
},
{
"name": "endTime",
"type": "string"
},
{
"name": "endTimestamp",
"type": "int"
},
{
"name": "previousRating",
"type": "string"
},
{
"name": "rating",
"type": "string"
},
{
"name": "riskId",
"type": "int"
},
{
"name": "riskUri",
"type": "string"
},
{
"name": "startTime",
"type": "datetime"
},
{
"name": "startTimestamp",
"type": "int"
},
{
"name": "state",
"type": "string"
},
{
"name": "workbenchUri",
"type": "string"
}
]
}
81 changes: 81 additions & 0 deletions .script/tests/KqlvalidationsTests/CustomTables/DarktraceEMAIL_CL.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,81 @@
{
"Name": "DarktraceEMAIL_CL",
"Properties": [
{
"name": "actions",
"type": "dynamic"
},
{
"name": "alertTime",
"type": "datetime"
},
{
"name": "anomalyScore",
"type": "int"
},
{
"name": "attachmentNames",
"type": "dynamic"
},
{
"name": "attachmentSha1s",
"type": "dynamic"
},
{
"name": "attachmentSha256s",
"type": "dynamic"
},
{
"name": "customLabel",
"type": "string"
},
{
"name": "darktraceProduct",
"type": "string"
},
{
"name": "direction",
"type": "string"
},
{
"name": "from",
"type": "string"
},
{
"name": "linkHosts",
"type": "dynamic"
},
{
"name": "messageId",
"type": "string"
},
{
"name": "recipientActions",
"type": "dynamic"
},
{
"name": "recipients",
"type": "dynamic"
},
{
"name": "subject",
"type": "string"
},
{
"name": "tags",
"type": "dynamic"
},
{
"name": "timestamp",
"type": "datetime"
},
{
"name": "url",
"type": "string"
},
{
"name": "uuid",
"type": "string"
}
]
}
121 changes: 121 additions & 0 deletions .script/tests/KqlvalidationsTests/CustomTables/DarktraceIncidents_CL.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,121 @@
{
"Name": "DarktraceIncidents_CL",
"Properties": [
{
"name": "activityId",
"type": "string"
},
{
"name": "aiaScore",
"type": "int"
},
{
"name": "bestAssetName",
"type": "string"
},
{
"name": "currentGroup",
"type": "string"
},
{
"name": "customLabel",
"type": "string"
},
{
"name": "darktraceProduct",
"type": "string"
},
{
"name": "deviceHostname",
"type": "string"
},
{
"name": "deviceIp",
"type": "string"
},
{
"name": "deviceIdentifier",
"type": "string"
},
{
"name": "deviceMac",
"type": "string"
},
{
"name": "deviceSubnet",
"type": "string"
},
{
"name": "devices",
"type": "dynamic"
},
{
"name": "endTime",
"type": "string"
},
{
"name": "externalId",
"type": "string"
},
{
"name": "groupByActivity",
"type": "boolean"
},
{
"name": "groupCategory",
"type": "string"
},
{
"name": "groupPreviousGroups",
"type": "dynamic"
},
{
"name": "groupScore",
"type": "int"
},
{
"name": "groupingId",
"type": "string"
},
{
"name": "incidentEventTime",
"type": "datetime"
},
{
"name": "incidentEventTitle",
"type": "string"
},
{
"name": "latitude",
"type": "real"
},
{
"name": "longitude",
"type": "real"
},
{
"name": "newEvent",
"type": "boolean"
},
{
"name": "severity",
"type": "int"
},
{
"name": "startTime",
"type": "string"
},
{
"name": "summary",
"type": "string"
},
{
"name": "summaryFirstSentence",
"type": "string"
},
{
"name": "url",
"type": "string"
}
]
}
Loading