Change log for CEQUENCE_BOT_DEFENSE
| Date | Changes |
|---|---|
| 2025-08-26 |
Enhancement: - Declared field sec_action as "".- event.idm.read_only_udm.principal.user.userid: Newly Mapped username raw log field to event.idm.read_only_udm.principal.user.userid UDM field. - Consolidated all mapping for event.idm.read_only_udm.additional.fields, event.idm.read_only_udm.security_result.detection_fields. |
| 2025-01-31 |
- Mapped status_code to network.http.response_code.- Mapped country to principal.location.country_or_region.- Mapped city to principal.location.city.- Mapped experimental_confidence, extracted_data.respbody, successful_login, transaction_id, and tag to additional.fields.- Mapped ruleinfo.weight, ruleinfo.hash_component, ruleinfo.experimental, x-cloud-trace-context, access-control-allow-headers, access-control-allow-methods, and access-control-allow-origin to security_result.detection_fields".- Mapped server_ip to target.ip.- Mapped confidence to security_result.confidence_details.- Mapped mitigation_action to security_result.action.- Mapped x_ip to principal.ip.- Mapped x_externalip to target.ip.
|
| 2024-07-05 | - Newly created parser. |