Change log for CHROME_MANAGEMENT
Date | Changes |
---|---|
2023-03-24 | Enhancement:
- Changed metadata.event_type from "USER_RESOURCE_ACCESS" to "USER_UNCATEGORIZED" when "event" is "dataAccessControlEvent". |
2023-02-24 | Enhancement:
- Mapped "deviceUser" to "principal.user.email_addresses". - Mapped "deviceName" to "principal.hostname". - Mapped "deviceId" to "principal.asset.asset_id" and "principal.resource.product_object_id". - Mapped "clientType" to "principal.application". - Mapped "osPlatform" to "principal.platform". - Mapped "source" to "principal.url". - Mapped "destination" to "target.url" if the value matches the regular expression `\\S+\\.\\S+` else mapped to "target.application". - Mapped "contentType" to "target.file.mime_type". - Mapped "contentSize" to "target.file.size". - Mapped "contentName" to "target.file.full_path". - Mapped "userAgent" to "network.http.parsed_user_agent". - Mapped "triggerType" to "security_result.summary". - Mapped "browserVersion" to "additional.fields". - Mapped "browser_version" to "additional.fields". |
2023-02-14 | Enhancement:
- Mapped "extension_id" to "target.resource.id". - Mapped "extension_name" to "target.resource.name". - Mapped "USER_RESOURCE_UPDATE_CONTENT" to "metadata.event_type" where "event" is "browserExtensionInstallEvent". |
2023-02-03 | Enhancement:
- Deleted mapping for the following fields 'vender', 'product', 'venderId', 'productId'. |
2023-01-31 | Enhancement:
- Mapped 'device_user' to 'target.user.email_addresses' if event is 'CHROME_OS_LOGIN_EVENT', 'CHROME_OS_LOGOUT_EVENT' else mapped to 'principal.user.email_addresses'. - Mapped 'metadata.event_type' as 'USER_LOGOUT' where event is 'CHROME_OS_LOGOUT_EVENT'. - Mapped 'metadata.event_type' as 'USER_LOGIN' where event is 'CHROME_OS_LOGIN_EVENT'. - Mapped 'metadata.event_type' as 'USER_UNCATEGORIZED' where event is 'CHROME_OS_ADD_USER', 'CHROME_OS_REMOVE_USER'. - Mapped 'metadata.event_type' as 'STATUS_UPDATE' where event is 'CHROMEOS_PERIPHERAL_STATUS_UPDATED'. - Mapped 'metadata.event_type' as 'STATUS_STARTUP' where event is 'CHROME_OS_CRD_HOST_STARTED'. - Mapped 'event_detail' to 'metadata.description'. - Mapped 'vender' to 'principal.resource.attribute.labels'. - Mapped 'product' to 'principal.resource.attribute.labels'. - Mapped 'venderId' to 'principal.resource.attribute.labels'. - Mapped 'productId' to 'principal.resource.attribute.labels'. - Mapped 'device_id' to 'principal.asset.asset_id'. - Mapped 'principal.platform' as 'CHROME_OS' when 'os_platform' is equals to 'ChromeOS'. |
2022-12-15 | Enhancement:
- Mapped 'directory_device_id' to 'principal.resource.product_object_id'. - Mapped 'user_agent' to 'network.http.parsed_user_agent'. |
2022-10-04 | Enhancement:
For event containing 'passwordBreachEvent' and 'loginEvent' : - Modified mapping for 'metadata.event_type' from 'NETWORK_HTTP' to 'USER_LOGIN'. - Mapped 'extensions.auth.type' to 'AUTHTYPE_UNSPECIFIED'. |
2022-07-19 | Enhancement:
-Added condition to parse url which doesn't contain content_name. -Mapped "metadata.event_type" to "STATUS_UPDATE" where event is "sensitiveDataEvent" -Mapped "metadata.event_type" to "FILE_SYNC" where event is "dangerousDownloadEvent" -Mapped "metadata.event_type" to "STATUS_UPDATE" where "principal.hostname" is not null and "metadata.event_type" is "GENERIC_EVENT" |