Updating PAT with latest regexs for validation (#552)

* Updating PAT with latest regexs for validation * Auto-format files --------- Co-authored-by: panther-bot-automation <[email protected]>
panther-labs · Oct 8, 2024 · 0a16a55 · 0a16a55
1 parent 8bd45e9
commit 0a16a55
Showing 1 changed file with 17 additions and 1 deletion.
diff --git a/panther_analysis_tool/schema_regexs.py b/panther_analysis_tool/schema_regexs.py
@@ -138,6 +138,7 @@
     r"Lacework\.UserDetails|"
     r"Lacework\.UserLogin|"
     r"Linux\.Auditd|"
+    r"MISP\.WarningListsCIDR|"
     r"Material\.CaseCreated|"
     r"Microsoft365\.Audit\.AzureActiveDirectory|"
     r"Microsoft365\.Audit\.Exchange|"
@@ -208,6 +209,7 @@
     r"OCSF\.WinregistryValueInfo|"
     r"OCSF\.WinresourceActivity|"
     r"OSSEC\.EventInfo|"
+    r"OTX\.Pulses|"
     r"Okta\.Devices|"
     r"Okta\.SystemLog|"
     r"Okta\.Users|"
@@ -235,6 +237,15 @@
     r"Slack\.AccessLogs|"
     r"Slack\.AuditLogs|"
     r"Slack\.IntegrationLogs|"
+    r"Snowflake\.AccessHistory|"
+    r"Snowflake\.DataTransferHistory|"
+    r"Snowflake\.GrantsToRoles|"
+    r"Snowflake\.GrantsToUsers|"
+    r"Snowflake\.LoginHistory|"
+    r"Snowflake\.QueryHistory|"
+    r"Snowflake\.Sessions|"
+    r"Snowflake\.Stages|"
+    r"Snowflake\.Users|"
     r"Snyk\.GroupAudit|"
     r"Snyk\.OrgAudit|"
     r"Sophos\.Central|"
@@ -288,7 +299,12 @@
     r"Zendesk\.Audit|"
     r"Zoom\.Activity|"
     r"Zoom\.Operation|"
-    r"ZScaler\.ZIAAuditLog|"
+    r"Zscaler\.ZIA\.AdminAuditLog|"
+    r"Zscaler\.ZPA\.AppConnectorMetrics|"
+    r"Zscaler\.ZPA\.AppConnectorStatus|"
+    r"Zscaler\.ZPA\.AuditLog|"
+    r"Zscaler\.ZPA\.UserActivity|"
+    r"Zscaler\.ZPA\.UserStatus|"
     r"Custom\.([A-Z][A-Za-z0-9]*)(\.[A-Z][A-Za-z0-9]*){0,5}"
     r")$"
 )