In one week (2022-09-15), we will be removing CHAIN-S00009 - 'Proofpoint TAP Click Permitted Followed by Successful Request' rule to consolidate Proofpoint TAP rules while providing equivalent detection value.
Rules
- [Updated] MATCH-S00819 Chromium Process Started With Debugging Port
Log Mappers
- [Updated] Aruba ClearPass Syslog
Parsers
- [Updated] /Parsers/System/HP/Aruba ClearPass - Syslog
- [Updated] /Parsers/System/Microsoft/Microsoft Azure JSON
- [Updated] /Parsers/System/Microsoft/Microsoft IIS