Skip to content

Commit 3d97a8b

Browse files
jaspreet-sainijaspreet-saini
committed
Adding new events to Samsung knox dcr and enhance Workbook
1 parent 482e523 commit 3d97a8b

11 files changed

Lines changed: 649 additions & 225 deletions

‎Solutions/Samsung Knox Asset Intelligence/CustomTables/Samsung_Knox_Application_CL.json‎

Lines changed: 46 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,10 @@
77
"isDefaultDisplay": true,
88
"description": "The timestamp (UTC) reflecting the time in which the event was generated."
99
},
10+
{
11+
"name": "EventTime",
12+
"type": "DateTime"
13+
},
1014
{
1115
"name": "PrimaryImei",
1216
"type": "string"
@@ -31,17 +35,13 @@
3135
"name": "DeviceModel",
3236
"type": "string"
3337
},
34-
{
35-
"name": "EventGuid",
36-
"type": "long"
37-
},
3838
{
3939
"name": "Name",
4040
"type": "string"
4141
},
4242
{
4343
"name": "Version",
44-
"type": "string"
44+
"type": "int"
4545
},
4646
{
4747
"name": "Severity",
@@ -66,6 +66,46 @@
6666
{
6767
"name": "RestrictedPerms",
6868
"type": "dynamic"
69+
},
70+
{
71+
"name": "VersionCode",
72+
"type": "long"
73+
},
74+
{
75+
"name": "InstallerPkgName",
76+
"type": "string"
77+
},
78+
{
79+
"name": "Policy",
80+
"type": "string"
81+
},
82+
{
83+
"name": "EventId",
84+
"type": "string"
85+
},
86+
{
87+
"name": "AdmPkgName",
88+
"type": "string"
89+
},
90+
{
91+
"name": "UserId",
92+
"type": "int"
93+
},
94+
{
95+
"name": "Uid",
96+
"type": "int"
97+
},
98+
{
99+
"name": "StartTime",
100+
"type": "datetime"
101+
},
102+
{
103+
"name": "SeTag",
104+
"type": "string"
105+
},
106+
{
107+
"name": "Hash",
108+
"type": "string"
69109
}
70-
]
110+
]
71111
}

‎Solutions/Samsung Knox Asset Intelligence/CustomTables/Samsung_Knox_Audit_CL.json‎

Lines changed: 122 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,10 @@
77
"isDefaultDisplay": true,
88
"description": "The timestamp (UTC) reflecting the time in which the event was generated."
99
},
10+
{
11+
"name": "EventTime",
12+
"type": "DateTime"
13+
},
1014
{
1115
"name": "PrimaryImei",
1216
"type": "string"
@@ -31,17 +35,13 @@
3135
"name": "DeviceModel",
3236
"type": "string"
3337
},
34-
{
35-
"name": "EventGuid",
36-
"type": "long"
37-
},
3838
{
3939
"name": "Name",
4040
"type": "string"
4141
},
4242
{
4343
"name": "Version",
44-
"type": "string"
44+
"type": "int"
4545
},
4646
{
4747
"name": "Severity",
@@ -82,6 +82,122 @@
8282
{
8383
"name": "PkgName",
8484
"type": "string"
85+
},
86+
{
87+
"name": "Allow",
88+
"type": "string"
89+
},
90+
{
91+
"name": "Subject",
92+
"type": "string"
93+
},
94+
{
95+
"name": "Issuer",
96+
"type": "string"
97+
},
98+
{
99+
"name": "Timeout",
100+
"type": "int"
101+
},
102+
{
103+
"name": "Cmd",
104+
"type": "string"
105+
},
106+
{
107+
"name": "Enabled",
108+
"type": "boolean"
109+
},
110+
{
111+
"name": "PairedDeviceMacAddr",
112+
"type": "string"
113+
},
114+
{
115+
"name": "Result",
116+
"type": "boolean"
117+
},
118+
{
119+
"name": "Reason",
120+
"type": "string"
121+
},
122+
{
123+
"name": "Strong",
124+
"type": "boolean"
125+
},
126+
{
127+
"name": "MountPoint",
128+
"type": "string"
129+
},
130+
{
131+
"name": "VolumeLabel",
132+
"type": "string"
133+
},
134+
{
135+
"name": "Path",
136+
"type": "string"
137+
},
138+
{
139+
"name": "Signature",
140+
"type": "string"
141+
},
142+
{
143+
"name": "KeyAlias",
144+
"type": "string"
145+
},
146+
{
147+
"name": "Uid",
148+
"type": "int"
149+
},
150+
{
151+
"name": "PwdComplexity",
152+
"type": "string"
153+
},
154+
{
155+
"name": "PwdConstraint",
156+
"type": "string"
157+
},
158+
{
159+
"name": "MinNumOfLetters",
160+
"type": "int"
161+
},
162+
{
163+
"name": "MinNumOfNonLetters",
164+
"type": "int"
165+
},
166+
{
167+
"name": "MinNumOfDigits",
168+
"type": "int"
169+
},
170+
{
171+
"name": "MinNumOfUpperLetters",
172+
"type": "int"
173+
},
174+
{
175+
"name": "MinNumOfLowerLetters",
176+
"type": "int"
177+
},
178+
{
179+
"name": "MinNumOfSymbols",
180+
"type": "int"
181+
},
182+
{
183+
"name": "PwdHistoryLength",
184+
"type": "int"
185+
},
186+
{
187+
"name": "MinPwdLength",
188+
"type": "int"
189+
},
190+
{
191+
"name": "UserRestriction",
192+
"type": "string"
193+
},
194+
{
195+
"name": "EventId",
196+
"type": "string"
197+
},
198+
{
199+
"name": "Ssid",
200+
"type": "string"
85201
}
86-
]
202+
]
87203
}

‎Solutions/Samsung Knox Asset Intelligence/CustomTables/Samsung_Knox_Network_CL.json‎

Lines changed: 17 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,11 @@
44
{
55
"name": "TimeGenerated",
66
"type": "DateTime",
7-
"isDefaultDisplay": true,
8-
"description": "The timestamp (UTC) reflecting the time in which the event was generated."
7+
"isDefaultDisplay": true
8+
},
9+
{
10+
"name": "EventTime",
11+
"type": "DateTime"
912
},
1013
{
1114
"name": "PrimaryImei",
@@ -31,17 +34,13 @@
3134
"name": "DeviceModel",
3235
"type": "string"
3336
},
34-
{
35-
"name": "EventGuid",
36-
"type": "long"
37-
},
3837
{
3938
"name": "Name",
4039
"type": "string"
4140
},
4241
{
4342
"name": "Version",
44-
"type": "string"
43+
"type": "int"
4544
},
4645
{
4746
"name": "Severity",
@@ -59,7 +58,7 @@
5958
"name": "Protocol",
6059
"type": "int"
6160
},
62-
{
61+
{
6362
"name": "SourcePort",
6463
"type": "int"
6564
},
@@ -80,7 +79,7 @@
8079
"type": "DateTime"
8180
},
8281
{
83-
"name": "Family",
82+
"name": "InetFamily",
8483
"type": "int"
8584
},
8685
{
@@ -130,6 +129,14 @@
130129
{
131130
"name": "SocketType",
132131
"type": "int"
132+
},
133+
{
134+
"name": "EventId",
135+
"type": "string"
136+
},
137+
{
138+
"name": "UserId",
139+
"type": "int"
133140
}
134-
]
141+
]
135142
}

0 commit comments

Comments
 (0)