fix: Packs based on scheduled queries also need the scheduled queries…

… to be defined in the pack. Also, added a name for onepassword pack (#499)
panther-labs · Sep 16, 2022 · 154c140 · 154c140
1 parent 54517b8
commit 154c140
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/packs/onepassword.yml b/packs/onepassword.yml
@@ -1,5 +1,7 @@
 AnalysisType: pack
 PackID: PantherManaged.OnePassword
+Description: Group of all OnePassword Detections
+DisplayName: Panther OnePassword Pack
 PackDefinition:
   IDs:
     # Data Models

diff --git a/packs/snowflake.yml b/packs/snowflake.yml
@@ -3,6 +3,18 @@ PackID: PantherManaged.Snowflake
 Description: Group of all Snowflake detections
 PackDefinition:
   IDs:
+    - Query.Snowflake.AccountAdminGranted
+    - Query.Snowflake.BruteForceByIp
+    - Query.Snowflake.BruteForceByUsername
+    - Query.Snowflake.KeyUserPasswordLogin
+    - Query.Snowflake.MFALogin
+    - Query.Snowflake.NetworkPolicyModified
+    - Query.Snowflake.PrivilegedObjectUpdate
+    - Query.Snowflake.PublicRoleGrant
+    - Query.Snowflake.SCIMTokenCreated
+    - Query.Snowflake.UnusualLoginVolume
+    - Query.Snowflake.UserCreated
+    - Query.Snowflake.UserEnabled
     - Snowflake.AccountAdminGranted
     - Snowflake.BruteForceByIp
     - Snowflake.BruteForceByUsername