Skip to content

cisco 3.1.3 #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
oferInbar merged 2 commits into from
Oct 13, 2026
Merged

cisco 3.1.3 #3

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a504045
Update CiscoASA to 3.1.3 with content provenance
oferInbar Oct 13, 2026
306eea3
Merge fork master and retain CiscoASA 3.1.3 provenance
oferInbar Oct 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Solutions/CiscoASA/Data/Solution_Cisco asa.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,5 +29,5 @@
"Metadata": "SolutionMetadata.json",
"TemplateSpec": false,
"Is1PConnector": false,
"Version": "3.1.2"
"Version": "3.1.3"
}
Binary file added Solutions/CiscoASA/Package/3.1.3.zip
View file
Open in desktop
Binary file not shown.
417 changes: 252 additions & 165 deletions Solutions/CiscoASA/Package/mainTemplate.json
View file
Open in desktop

Large diffs are not rendered by default.

1 change: 1 addition & 0 deletions Solutions/CiscoASA/ReleaseNotes.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,6 @@
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
|-------------|--------------------------------|------------------------------------------------------------------------------|
| 3.1.3 | 13-10-2026 | Added workload, data-type, and connector prerequisite records to all three disabled XDR Custom Detections. Updated XDR content versions to 3.1.3 and V3.1 packaging to include resolved package/content provenance in installation and Content Hub registration records. |
| 3.1.2 | 12-10-2026 | Refreshed the V3.1 hybrid package for three disabled Defender XDR Custom Detections with reviewed Host mappings and source-rule provenance. |
| 3.1.1 | 11-10-2026 | Added a reviewed Host mapping to the threat-message Custom Detection and recorded accepted Host-mapping assumptions while preserving original host values in alert details. |
| 3.1.0 | 11-10-2026 | Added three disabled Defender XDR Custom Detections with source-rule provenance and V3.1 hybrid packaging support. |
Expand Down
2 changes: 1 addition & 1 deletion Solutions/CiscoASA/SolutionMetadata.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,5 +18,5 @@
"email": "support@microsoft.com",
"link": "https://support.microsoft.com/"
},
"version": "3.1.2"
"version": "3.1.3"
}
11 changes: 10 additions & 1 deletion Solutions/CiscoASA/XDR Detections/CiscoASA-AvgAttackDetectRateIncrease.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
schemaVersion: 1.0.0
version: 3.1.0
version: 3.1.3
kind: CustomDetection
resourceType: Microsoft.Security/detectionRules
apiVersion: 2026-06-01-preview
Expand All @@ -8,6 +8,15 @@ requiredDataConnectors:
dataTypes:
- CommonSecurityLog
contentProvenance:
requiredWorkloads:
- workload: sentinel
dataTypes:
- CommonSecurityLog
requiredDataConnectors:
- connectorId: CiscoAsaAma
dataTypes:
- CommonSecurityLog
dependencyReviewRequired: false
source:
platform: Microsoft Sentinel
kind: AnalyticsRule
Expand Down
11 changes: 10 additions & 1 deletion Solutions/CiscoASA/XDR Detections/CiscoASA-PossibleDataExfiltration.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
schemaVersion: 1.0.0
version: 3.1.0
version: 3.1.3
kind: CustomDetection
resourceType: Microsoft.Security/detectionRules
apiVersion: 2026-06-01-preview
Expand All @@ -8,6 +8,15 @@ requiredDataConnectors:
dataTypes:
- CommonSecurityLog
contentProvenance:
requiredWorkloads:
- workload: sentinel
dataTypes:
- CommonSecurityLog
requiredDataConnectors:
- connectorId: CiscoAsaAma
dataTypes:
- CommonSecurityLog
dependencyReviewRequired: false
source:
platform: Microsoft Sentinel
kind: AnalyticsRule
Expand Down
11 changes: 10 additions & 1 deletion Solutions/CiscoASA/XDR Detections/CiscoASA-ThreatDetectionMessage.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
schemaVersion: 1.0.0
version: 3.1.0
version: 3.1.3
kind: CustomDetection
resourceType: Microsoft.Security/detectionRules
apiVersion: 2026-06-01-preview
Expand All @@ -8,6 +8,15 @@ requiredDataConnectors:
dataTypes:
- CommonSecurityLog
contentProvenance:
requiredWorkloads:
- workload: sentinel
dataTypes:
- CommonSecurityLog
requiredDataConnectors:
- connectorId: CiscoAsaAma
dataTypes:
- CommonSecurityLog
dependencyReviewRequired: false
source:
platform: Microsoft Sentinel
kind: AnalyticsRule
Expand Down
Loading