Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] No pre-packaged detection rules for Google workspace and VPC Flow log types #610

Closed
amsiglan opened this issue Sep 20, 2023 · 2 comments
Assignees
Labels

Comments

@amsiglan
Copy link
Collaborator

What is the bug?
There are no pre-packaged detection rules for Google workspace and VPC Flow log types

How can one reproduce the bug?
Steps to reproduce the behavior:

  1. Go to the Detection rules page under Detectors
  2. Filter by Log type with options gworkspace and vpcflow

What is the expected behavior?
We should have some rules pre-packaged for these log types

Do you have any screenshots?
image

Do you have any additional context?
N/A

@amsiglan amsiglan added bug Something isn't working untriaged labels Sep 20, 2023
@amsiglan amsiglan changed the title [BUG] [BUG] No pre-packaged detection rules for Google workspace and VPC Flow log types Sep 20, 2023
@amsiglan
Copy link
Collaborator Author

Investigation update:
Rules are present under the gworkspace directory but since they have duplicate ids, we need to change them so that they are returned for the gworkspace log type

@lezzago lezzago self-assigned this Oct 2, 2023
@lezzago lezzago mentioned this issue Oct 3, 2023
5 tasks
@amsiglan
Copy link
Collaborator Author

amsiglan commented Oct 5, 2023

There are no sigma rules for vpc flow

@amsiglan amsiglan closed this as completed Oct 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants