Merge pull request #535 from PaloAltoNetworks/Darwin-23.11.1

Darwin 23.11.1
PaloAltoNetworks · Nov 3, 2023 · b86269c · b86269c
2 parents fb94e44 + 836a900
commit b86269c
Show file tree

Hide file tree

Showing 11 changed files with 6,758 additions and 1,580 deletions.
diff --git a/openapi-specs/cspm/Alerts.json b/openapi-specs/cspm/Alerts.json
@@ -274,6 +274,16 @@
             "format": "int64",
             "type": "integer"
           },
+          "appMetadata": {
+            "description": "Application Metadata from AppDna",
+            "items": {
+              "additionalProperties": {
+                "type": "string"
+              },
+              "type": "object"
+            },
+            "type": "array"
+          },
           "dismissalDuration": {
             "description": "Dismissal Duration",
             "type": "string"
@@ -606,6 +616,10 @@
               }
             ]
           },
+          "findingId": {
+            "description": "Policy Id to remediate finding for an attack path alert",
+            "type": "string"
+          },
           "policies": {
             "description": "List of policy IDs. A single policy ID is required if no alerts are specified.",
             "items": {
@@ -1282,7 +1296,20 @@
                 "ueba",
                 "permissions",
                 "network_config",
-                "identity"
+                "identity",
+                "sensitive_data_exposure",
+                "internet_exposure",
+                "injections",
+                "vulnerability_scanning",
+                "shellshock",
+                "known_bots",
+                "unknown_bots",
+                "virtual_patches",
+                "event",
+                "misconfig_and_event",
+                "misconfig",
+                "host",
+                "container_image"
               ],
               "type": "string"
             },
@@ -1301,8 +1328,10 @@
               "iam",
               "workload_vulnerability",
               "workload_incident",
-              "waas_event",
-              "attack_path"
+              "api",
+              "attack_path",
+              "malware",
+              "grayware"
             ],
             "type": "string"
           },
@@ -1481,7 +1510,20 @@
                 "ueba",
                 "permissions",
                 "network_config",
-                "identity"
+                "identity",
+                "sensitive_data_exposure",
+                "internet_exposure",
+                "injections",
+                "vulnerability_scanning",
+                "shellshock",
+                "known_bots",
+                "unknown_bots",
+                "virtual_patches",
+                "event",
+                "misconfig_and_event",
+                "misconfig",
+                "host",
+                "container_image"
               ],
               "type": "string"
             },
@@ -1500,8 +1542,10 @@
               "iam",
               "workload_vulnerability",
               "workload_incident",
-              "waas_event",
-              "attack_path"
+              "api",
+              "attack_path",
+              "malware",
+              "grayware"
             ],
             "type": "string"
           },
@@ -3934,6 +3978,14 @@
             "schema": {
               "type": "string"
             }
+          },
+          {
+            "in": "query",
+            "name": "findingId",
+            "required": false,
+            "schema": {
+              "type": "string"
+            }
           }
         ],
         "responses": {