[Amazon Security Lake] - OCSF v1.1 update with major refactor & adding support for dynamic template and mappings & system tests#10405

Merged

ShourieG merged 40 commits intoelastic:mainfrom ShourieG:security_lake/ocsf_1.1

Oct 23, 2024

+34,099-20,744

Commits on Jun 7, 2024

added support for new user inventory info event class and updated incomplete mappings
ShourieG
committed

Commits on Jun 13, 2024

trying to make a working system test
ShourieG
committed

Commits on Jun 17, 2024

merged with upstream
ShourieG
committed

Commits on Jun 21, 2024

initial working system tests added pending elastic-package changes to detect rerouted datastreams
ShourieG
committed

Commits on Jul 2, 2024

merged with upstream/main
ShourieG
committed

Commits on Jul 10, 2024

test commit to be reverted
ShourieG
committed

Commits on Jul 12, 2024

Commits on Jul 23, 2024

Merge branch 'main' into security_lake/ocsf_1.1
ShourieG
committed

Commits on Aug 1, 2024

added ntp activity event class, deprecated proxy event class, aded proxy_endpoint field, uupdated network activity class and segregated endpoint event mappings into separate files across all data s…
ShourieG
committed

Commits on Aug 2, 2024

added os patch state event class, segregated device fields across all data streams, added new fields to support newly added event class
ShourieG
committed

Commits on Aug 6, 2024

Commits on Aug 7, 2024

Commits on Aug 9, 2024

Commits on Aug 13, 2024

fixed timestamp issues across all data streams, added all system tests and updated missing mappings accorgingly
ShourieG
committed

Commits on Aug 14, 2024

resolved merge conflicts
ShourieG
committed

Commits on Aug 19, 2024

Commits on Aug 26, 2024

updated with main, resolved merge conflicts
ShourieG
committed

Commits on Aug 29, 2024

Merge remote-tracking branch 'upstream/main' into security_lake/ocsf_1.1
ShourieG
committed

Commits on Oct 23, 2024

addressed PR comments and updated pipelines, file names and field mappings accordingly
ShourieG
committed