Devika Mehra
Devika Mehra
@chrisjaimon2012 Can you please provide brief description of what your template does and how do you think this can help the existing connector? Does this add a missing piece, or...
> 'where old_value_set == "[]"' looks for an empty value being populated with a non-empty. > > From our LAWs datasets, this doesn't appear to be possible in the Azure...
> > > 'where old_value_set == "[]"' looks for an empty value being populated with a non-empty. > > > From our LAWs datasets, this doesn't appear to be possible...
@v-prasadboke I am working on adding required fields to test scenarios and will approve post that. @dhruvilbhatt-crest Not necessary, but a suggestion. Can we add EventSeverity based on EventResult field.
@dhruvilbhatt-crest There is a PR pending to be merged for whitelisting the required strings in tests https://github.com/Azure/Azure-Sentinel/pull/8047
@v-laanjana Can you please help with failing validations. There seems to be issues with queries outside the scope of this PR. Let me know in case I should be making...
All required changes are made. @v-sabiraj What changes are required in skip list?
@juju4 Why are we required to remove spaces in all the files in the repo? Is this really required? @v-atulyadav Can you communicate the requirement of this change offline? I...
@juju4 Thank you so much for clarifying. @v-atulyadav Can you work with Prateek on this? Should we be making this change, what will be the impact, etc.
> @devikamehra Regarding the WorFromHome Analytics rule relate question. We have understood your concern, but the actual use case of this analytic rule is as below, > > 1. We...