Merge branch 'main' into security_control_everywhere

Signed-off-by: Rajas <[email protected]>
ocsf · Dec 13, 2024 · ed0e606 · ed0e606
2 parents 1e15ad3 + 2628909
commit ed0e606
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -111,7 +111,7 @@ Thankyou! -->
     1. Add `host` profile to base_event.json and remove this profile elsewhere in the event hierarchy. #1280
     1. Add the `actor` attribute to the IAM base event. #1280
     1. Add `security_control` profile to base_event.json and remove this profile elsewhere in the event hierarchy. #1281
-
+    1. Add `Unlock` activity to `account_change` class. #1285
 * #### Profiles
     1. Added `is_alert`, `confidence_id`, `confidence`, `confidence_score` attributes to the `security_control` profile. #1178
     1. Added `risk_level_id`, `risk_level`, `risk_score`, `risk_details` attributes to the `security_control` profile.  #1178

diff --git a/events/iam/account_change.json b/events/iam/account_change.json
@@ -50,6 +50,10 @@
         "11": {
           "caption": "MFA Factor Disable",
           "description": "An authentication factor was disabled for an account."
+        },
+        "12": {
+          "caption": "Unlock",
+          "description": "A user account was unlocked."
         }
       }
     },
@@ -69,4 +73,4 @@
       "requirement": "recommended"
     }
   }
-}
+}