From b019d6d98d30869f8230311de0f659d019163328 Mon Sep 17 00:00:00 2001 From: terrancedejesus Date: Fri, 13 Jan 2023 12:55:58 -0500 Subject: [PATCH 1/2] Bumping min-stack version for Google Workspace to 8.4 --- ...google_drive_ownership_transferred_via_google_workspace.toml | 2 +- ...google_workspace_custom_gmail_route_created_or_modified.toml | 2 +- ..._application_removed_from_blocklist_in_google_workspace.toml | 2 +- ...vasion_domain_added_to_google_workspace_trusted_domains.toml | 2 +- ...nse_evasion_google_workspace_bitlocker_setting_disabled.toml | 2 +- ...ictions_for_google_marketplace_changed_to_allow_any_app.toml | 2 +- .../impact_google_workspace_admin_role_deletion.toml | 2 +- .../impact_google_workspace_mfa_enforcement_disabled.toml | 2 +- ...ersistence_application_added_to_google_workspace_domain.toml | 2 +- .../persistence_google_workspace_2sv_policy_disabled.toml | 2 +- ...ersistence_google_workspace_admin_role_assigned_to_user.toml | 2 +- ..._access_granted_via_domain_wide_delegation_of_authority.toml | 2 +- .../persistence_google_workspace_custom_admin_role_created.toml | 2 +- .../persistence_google_workspace_policy_modified.toml | 2 +- .../persistence_google_workspace_role_modified.toml | 2 +- ...ace_user_group_access_modified_to_allow_external_access.toml | 2 +- ...tence_google_workspace_user_organizational_unit_changed.toml | 2 +- ...sistence_mfa_disabled_for_google_workspace_organization.toml | 2 +- 18 files changed, 18 insertions(+), 18 deletions(-) diff --git a/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml b/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml index 5a474051ac3..33ccf007d03 100644 --- a/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml +++ b/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml @@ -3,7 +3,7 @@ creation_date = "2022/08/24" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml b/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml index d71e241812f..4b8f5c78e45 100644 --- a/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml +++ b/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml @@ -3,7 +3,7 @@ creation_date = "2022/09/13" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml b/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml index 375fed3cc97..b3585d63704 100644 --- a/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml +++ b/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml @@ -3,7 +3,7 @@ creation_date = "2022/08/25" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml b/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml index b1bbc51f4d6..6781a32a260 100644 --- a/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml +++ b/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml b/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml index 9f8984fc32d..6c5f943015f 100644 --- a/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml +++ b/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml @@ -3,7 +3,7 @@ creation_date = "2022/09/06" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml b/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml index b112fae18dd..158a420b98e 100644 --- a/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml +++ b/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml @@ -3,7 +3,7 @@ creation_date = "2022/08/25" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml b/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml index 311c6bb8eeb..1a225c00d82 100644 --- a/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml +++ b/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml b/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml index ecd1b05c4e3..0e78a1eaa98 100644 --- a/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml +++ b/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml b/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml index 1fb52fa6a62..feaeb42ac33 100644 --- a/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml +++ b/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml b/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml index eb03f62d348..6c5a92d8fb3 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml @@ -3,7 +3,7 @@ creation_date = "2022/08/26" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml b/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml index 2d0a9a4ce2c..abfef901cdd 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml b/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml index ac316cfae9b..dd4eb64a030 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/12" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml b/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml index 847a5780c66..e0ca19ed36b 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml b/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml index 099f7fd4c90..ab25491e0cd 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml b/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml index 8811f1c0b76..bb1ea03f447 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml b/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml index 2cb7812b359..d91c2fdd5ee 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml @@ -3,7 +3,7 @@ creation_date = "2022/08/24" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml b/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml index 3604ac4cee8..ef044da1e1a 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml @@ -3,7 +3,7 @@ creation_date = "2022/09/06" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] diff --git a/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml b/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml index b5bcde235fd..530276edf39 100644 --- a/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml +++ b/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml @@ -3,7 +3,7 @@ creation_date = "2020/11/17" integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" -min_stack_version = "8.3.0" +min_stack_version = "8.4.0" updated_date = "2022/12/14" [rule] From 44bfa880ea4b642e13c36f4e72e32c874800370b Mon Sep 17 00:00:00 2001 From: terrancedejesus Date: Fri, 13 Jan 2023 13:07:19 -0500 Subject: [PATCH 2/2] changed 'updated_date' values --- ...google_drive_ownership_transferred_via_google_workspace.toml | 2 +- ...google_workspace_custom_gmail_route_created_or_modified.toml | 2 +- ..._application_removed_from_blocklist_in_google_workspace.toml | 2 +- ...vasion_domain_added_to_google_workspace_trusted_domains.toml | 2 +- ...nse_evasion_google_workspace_bitlocker_setting_disabled.toml | 2 +- ...ictions_for_google_marketplace_changed_to_allow_any_app.toml | 2 +- .../impact_google_workspace_admin_role_deletion.toml | 2 +- .../impact_google_workspace_mfa_enforcement_disabled.toml | 2 +- ...ersistence_application_added_to_google_workspace_domain.toml | 2 +- .../persistence_google_workspace_2sv_policy_disabled.toml | 2 +- ...ersistence_google_workspace_admin_role_assigned_to_user.toml | 2 +- ..._access_granted_via_domain_wide_delegation_of_authority.toml | 2 +- .../persistence_google_workspace_custom_admin_role_created.toml | 2 +- .../persistence_google_workspace_policy_modified.toml | 2 +- .../persistence_google_workspace_role_modified.toml | 2 +- ...ace_user_group_access_modified_to_allow_external_access.toml | 2 +- ...tence_google_workspace_user_organizational_unit_changed.toml | 2 +- ...sistence_mfa_disabled_for_google_workspace_organization.toml | 2 +- 18 files changed, 18 insertions(+), 18 deletions(-) diff --git a/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml b/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml index 33ccf007d03..2bf7adfe4f1 100644 --- a/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml +++ b/rules/integrations/google_workspace/collection_google_drive_ownership_transferred_via_google_workspace.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml b/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml index 4b8f5c78e45..ff4ecf7ff49 100644 --- a/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml +++ b/rules/integrations/google_workspace/collection_google_workspace_custom_gmail_route_created_or_modified.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml b/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml index b3585d63704..65049e2a9a1 100644 --- a/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml +++ b/rules/integrations/google_workspace/defense_evasion_application_removed_from_blocklist_in_google_workspace.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml b/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml index 6781a32a260..386b6b3561f 100644 --- a/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml +++ b/rules/integrations/google_workspace/defense_evasion_domain_added_to_google_workspace_trusted_domains.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml b/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml index 6c5f943015f..6edfea24a67 100644 --- a/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml +++ b/rules/integrations/google_workspace/defense_evasion_google_workspace_bitlocker_setting_disabled.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml b/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml index 158a420b98e..dda4a20bbcb 100644 --- a/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml +++ b/rules/integrations/google_workspace/defense_evasion_google_workspace_restrictions_for_google_marketplace_changed_to_allow_any_app.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml b/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml index 1a225c00d82..9b0ce5a3112 100644 --- a/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml +++ b/rules/integrations/google_workspace/impact_google_workspace_admin_role_deletion.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml b/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml index 0e78a1eaa98..582b9337984 100644 --- a/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml +++ b/rules/integrations/google_workspace/impact_google_workspace_mfa_enforcement_disabled.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml b/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml index feaeb42ac33..66503687f56 100644 --- a/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml +++ b/rules/integrations/google_workspace/persistence_application_added_to_google_workspace_domain.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml b/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml index 6c5a92d8fb3..6625a91a355 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_2sv_policy_disabled.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml b/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml index abfef901cdd..85dd78ec6fb 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_admin_role_assigned_to_user.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml b/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml index dd4eb64a030..7e855c69dc9 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_api_access_granted_via_domain_wide_delegation_of_authority.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml b/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml index e0ca19ed36b..fad964fa755 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_custom_admin_role_created.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml b/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml index ab25491e0cd..43de7d42ba1 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_policy_modified.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml b/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml index bb1ea03f447..b9110933a29 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_role_modified.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml b/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml index d91c2fdd5ee..3c9f85ee436 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_user_group_access_modified_to_allow_external_access.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml b/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml index ef044da1e1a..0ab94c81f8f 100644 --- a/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml +++ b/rules/integrations/google_workspace/persistence_google_workspace_user_organizational_unit_changed.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"] diff --git a/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml b/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml index 530276edf39..b6143b31d84 100644 --- a/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml +++ b/rules/integrations/google_workspace/persistence_mfa_disabled_for_google_workspace_organization.toml @@ -4,7 +4,7 @@ integration = ["google_workspace"] maturity = "production" min_stack_comments = "New fields added: required_fields, related_integrations, setup" min_stack_version = "8.4.0" -updated_date = "2022/12/14" +updated_date = "2023/01/13" [rule] author = ["Elastic"]