added region and account name while shipping asset data
added region while shipping vulnerabilities data, which helps in forming the vulnerability url
get the region from baseUrl stored in secret manager while plugin was created
created new policies for cs vulnerabilities with critical, high and medium severity
created the policy assessment rule for vulnerabilities
created violation will have a list of vulnerabilities with cve ids
Problem
Solution
Fixes # (issue if any)
Type of change
Please delete options that are not relevant.
[ ] Bug fix (non-breaking change which fixes an issue)
[X] New feature (non-breaking change which adds functionality)
[ ] Chore (no code changes)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] This change requires a documentation update
How Has This Been Tested?
Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also
list any relevant details for your test configuration
[ ] Run the shipper after the mapper and verify the crowdstrike_vulnerability index has all the vulnerabilities data, including accountId and region
[ ] Run the policy rule and verify violation is created for that particular severity with cve Ids and Urls
violation created:
Vulnerability info with deep link to crowdstrike platform:
Deeplink to nist:
Checklist:
[ ] My code follows the style guidelines of this project
[ ] My commit message/PR follows the contribution guidelines of this project
[ ] I have performed a self-review of my code
[ ] I have commented my code, particularly in hard-to-understand areas
[ ] I have added tests that prove my fix is effective or that my feature works
[ ] New and existing unit tests pass locally with my changes
Other Information:
List any documentation updates that are needed for the Wiki
Description
Problem
Solution
Fixes # (issue if any)
Type of change
Please delete options that are not relevant.
How Has This Been Tested?
Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration
violation created:
![image](https://github.com/PaladinCloud/CE/assets/149176078/37d86159-9f01-40de-ab97-603897061f5c)
Vulnerability info with deep link to crowdstrike platform:
![image](https://github.com/PaladinCloud/CE/assets/149176078/8e9f8019-9903-4560-b4a1-37a9be663eb0)
Deeplink to nist:
![image](https://github.com/PaladinCloud/CE/assets/149176078/7c6a00c2-ae81-45a6-8ab6-4f8cec414ac1)
Checklist:
Other Information:
List any documentation updates that are needed for the Wiki