VMware SD-WAN and SASE Solution v1.0.0

.script/tests/KqlvalidationsTests/CustomTables/VMware_CWS_DLPLogs_CL.json

@@ -0,0 +1,85 @@
+{
+   "Name":"VMware_CWS_DLPLogs_CL",
+   "Properties":[
+       {
+           "name": "action",
+           "type": "string"
+       },
+       {
+           "name": "alerted",
+           "type": "string"
+       },
+       {
+           "name": "ccl",
+           "type": "dynamic"
+       },
+       {
+           "name": "domain",
+           "type": "string"
+       },
+       {
+           "name": "dstUrl",
+           "type": "string"
+       },
+       {
+           "name": "eventId",
+           "type": "string"
+       },
+       {
+           "name": "eventTime",
+           "type": "datetime"
+       },
+       {
+           "name": "filename",
+           "type": "string"
+       },
+       {
+           "name": "fileType",
+           "type": "string"
+       },
+       {
+           "name": "protocol",
+           "type": "string"
+       },
+       {
+           "name": "requestType",
+           "type": "string"
+       },
+       {
+           "name": "ruleId",
+           "type": "string"
+       },
+       {
+           "name": "ruleName",
+           "type": "string"
+       },
+       {
+           "name": "sha256",
+           "type": "string"
+       },
+       {
+           "name": "srcUrl",
+           "type": "string"
+       },
+       {
+           "name": "status",
+           "type": "string"
+       },
+       {
+           "name": "streamName",
+           "type": "string"
+       },
+       {
+           "name": "userId",
+           "type": "string"
+       },
+       {
+           "name": "userInput",
+           "type": "string"
+       },
+       {
+           "name": "TimeGenerated",
+           "type": "datetime"
+       }
+   ]
+}

.script/tests/KqlvalidationsTests/CustomTables/VMware_CWS_Health_CL.json

@@ -0,0 +1,29 @@
+{
+   "Name":"VMware_CWS_Health_CL",
+   "Properties":[
+      {
+         "name": "cws_component",
+         "type": "string"
+      },
+      {
+         "name": "healthtest_observed_unit",
+         "type": "string"
+      },
+      {
+         "name": "healthtest_observed_value",
+         "type": "int"
+      },
+      {
+         "name": "healthtest_status",
+         "type": "string"
+      },
+      {
+         "name": "healthtest_timestamp",
+         "type": "datetime"
+      },
+      {
+         "name": "TimeGenerated",
+         "type": "datetime"
+      }
+   ]
+}

.script/tests/KqlvalidationsTests/CustomTables/VMware_CWS_Weblogs_CL.json

@@ -0,0 +1,197 @@
+{
+   "Name":"VMware_CWS_Weblogs_CL",
+   "Properties":[
+       {
+           "name": "accessMode",
+           "type": "string"
+       },
+       {
+           "name": "action",
+           "type": "string"
+       },
+       {
+           "name": "browserType",
+           "type": "dynamic"
+       },
+       {
+           "name": "browserVersion",
+           "type": "dynamic"
+       },
+       {
+           "name": "casbAppName",
+           "type": "dynamic"
+       },
+       {
+           "name": "casbCatName",
+           "type": "dynamic"
+       },
+       {
+           "name": "casbFunName",
+           "type": "dynamic"
+       },
+       {
+           "name": "casbOrgName",
+           "type": "dynamic"
+       },
+       {
+           "name": "casbRiskScore",
+           "type": "dynamic"
+       },
+       {
+           "name": "categories",
+           "type": "string"
+       },
+       {
+           "name": "contentType",
+           "type": "string"
+       },
+       {
+           "name": "cws_timestamp",
+           "type": "datetime"
+       },
+       {
+           "name": "destinationIp",
+           "type": "string"
+       },
+       {
+           "name": "dnsResponse",
+           "type": "string"
+       },
+       {
+           "name": "domain",
+           "type": "string"
+       },
+       {
+           "name": "dstCountry",
+           "type": "string"
+       },
+       {
+           "name": "egressIp",
+           "type": "string"
+       },
+       {
+           "name": "fileHash",
+           "type": "dynamic"
+       },
+       {
+           "name": "fileHashScore",
+           "type": "string"
+       },
+       {
+           "name": "fileName",
+           "type": "string"
+       },
+       {
+           "name": "fileScanResult",
+           "type": "dynamic"
+       },
+       {
+           "name": "fileSize",
+           "type": "string"
+       },
+       {
+           "name": "fileType",
+           "type": "string"
+       },
+       {
+           "name": "mimeType",
+           "type": "string"
+       },
+       {
+           "name": "policyHeaders",
+           "type": "string"
+       },
+       {
+           "name": "policyName",
+           "type": "string"
+       },
+       {
+           "name": "protocol",
+           "type": "string"
+       },
+       {
+           "name": "region",
+           "type": "string"
+       },
+       {
+           "name": "requestMethod",
+           "type": "string"
+       },
+       {
+           "name": "requestType",
+           "type": "string"
+       },
+       {
+           "name": "responseCode",
+           "type": "string"
+       },
+       {
+           "name": "risks",
+           "type": "dynamic"
+       },
+       {
+           "name": "ruleMatched",
+           "type": "string"
+       },
+       {
+           "name": "saasEgressHeaders",
+           "type": "dynamic"
+       },
+       {
+           "name": "sandboxInspectionResult",
+           "type": "string"
+       },
+       {
+           "name": "sandboxMaliciousActivitiesFound",
+           "type": "string"
+       },
+       {
+           "name": "sandboxScore",
+           "type": "string"
+       },
+       {
+           "name": "sourceIp",
+           "type": "string"
+       },
+       {
+           "name": "srcCountry",
+           "type": "string"
+       },
+       {
+           "name": "threatTypes",
+           "type": "dynamic"
+       },
+       {
+           "name": "url",
+           "type": "string"
+       },
+       {
+           "name": "userAgent",
+           "type": "string"
+       },
+       {
+           "name": "userGroups",
+           "type": "dynamic"
+       },
+       {
+           "name": "userGroupsMatched",
+           "type": "dynamic"
+       },
+       {
+           "name": "userId",
+           "type": "string"
+       },
+       {
+           "name": "virusList",
+           "type": "string"
+       },
+       {
+           "name": "webRiskScore",
+           "type": "string"
+       },
+       {
+           "name": "TimeGenerated",
+           "type": "datetime"
+       }
+   ]
+}

.script/tests/KqlvalidationsTests/CustomTables/VMware_SDWAN_EFSAPI_Health_CL.json

@@ -0,0 +1,17 @@
+{
+   "Name":"VMware_SDWAN_EFSAPI_Health_CL",
+   "Properties":[
+      {
+          "name": "data",
+          "type": "dynamic"
+      },
+      {
+          "name": "metadata",
+          "type": "dynamic"
+      },
+      {
+          "name": "TimeGenerated",
+          "type": "datetime"
+      }
+   ]
+}