From b748b3ee9cb7904c051f814d0616198c2ef81268 Mon Sep 17 00:00:00 2001 From: divious1 Date: Wed, 12 Aug 2020 17:29:18 -0400 Subject: [PATCH 1/2] converted lookup to collection --- lookups/api_call_by_user_baseline.csv | 1 - lookups/api_call_by_user_baseline.yml | 5 +++-- 2 files changed, 3 insertions(+), 3 deletions(-) delete mode 100644 lookups/api_call_by_user_baseline.csv diff --git a/lookups/api_call_by_user_baseline.csv b/lookups/api_call_by_user_baseline.csv deleted file mode 100644 index 5b789eb609..0000000000 --- a/lookups/api_call_by_user_baseline.csv +++ /dev/null @@ -1 +0,0 @@ -arn,numDataPoints,avgApiCalls,stdevApiCalls diff --git a/lookups/api_call_by_user_baseline.yml b/lookups/api_call_by_user_baseline.yml index 794c68c784..d84feea771 100644 --- a/lookups/api_call_by_user_baseline.yml +++ b/lookups/api_call_by_user_baseline.yml @@ -1,4 +1,5 @@ -description: A lookup file that will contain the baseline information for number of +description: A collection that will contain the baseline information for number of AWS API calls per user -filename: api_call_by_user_baseline.csv +collection: api_call_by_user_baseline name: api_call_by_user_baseline +fields_list: arn, numDataPoints, avgApiCalls, stdevApiCalls From 6de58bce6a3e112b8211f097214d8615d936f731 Mon Sep 17 00:00:00 2001 From: Bhavin Patel Date: Tue, 18 Aug 2020 15:28:54 -0700 Subject: [PATCH 2/2] Update api_call_by_user_baseline.yml latestCount is needed in detection search --- lookups/api_call_by_user_baseline.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lookups/api_call_by_user_baseline.yml b/lookups/api_call_by_user_baseline.yml index d84feea771..13068b3db6 100644 --- a/lookups/api_call_by_user_baseline.yml +++ b/lookups/api_call_by_user_baseline.yml @@ -2,4 +2,4 @@ description: A collection that will contain the baseline information for number AWS API calls per user collection: api_call_by_user_baseline name: api_call_by_user_baseline -fields_list: arn, numDataPoints, avgApiCalls, stdevApiCalls +fields_list: arn, latestCount, numDataPoints, avgApiCalls, stdevApiCalls