Skip to content

Rubrik Release 1.7.0 #44132

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
crestdatasystems wants to merge 2 commits into
base: contrib/crestdatasystems_Rubrik-Release-1.7.0
Choose a base branch
from
Open

Rubrik Release 1.7.0 #44132

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
d494c9e
Rubrik Release 1.7.0
crestdatasystems Apr 30, 2026
4d742fb
Changes as per requested comments.
crestdatasystems May 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
66 changes: 65 additions & 1 deletion Packs/RubrikPolaris/.pack-ignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,63 @@ ignore=IF115,IF113
[file:incidentfield-Rubrik_Suspicious_File_List.json]
ignore=IF113

[file:incidentfield-Rubrik_Object_Location.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_Snapshot_ID.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_Object_Account_Name.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_Violation_Name.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_Object_Region.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_Violation_Status.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_Violation_ID.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_Policy_Name.json]
ignore=IF113,IF115

[file:incidentfield-Rubrik_High_Risk_Hits.json]
ignore=IF113

[file:incidentfield-Rubrik_Files_At_Risk.json]
ignore=IF113

[file:incidentfield-Rubrik_Object_Create_Time.json]
ignore=IF113

[file:incidentfield-Rubrik_Data_Types.json]
ignore=IF113

[file:incidentfield-Rubrik_Total_Risk_Hits.json]
ignore=IF113

[file:incidentfield-Rubrik_Policy_Category.json]
ignore=IF113

[file:incidentfield-Rubrik_Data_Categories.json]
ignore=IF113

[file:incidentfield-Rubrik_Low_Risk_Hits.json]
ignore=IF113

[file:incidentfield-Rubrik_No_Risk_Hits.json]
ignore=IF113

[file:incidentfield-Rubrik_Medium_Risk_Hits.json]
ignore=IF113

[file:incidentfield-Rubrik_Object_Platform.json]
ignore=IF113

[known_words]
Acct
acfc
Expand Down Expand Up @@ -180,4 +237,11 @@ dummyuser
Fids
Unscannable
Uuids
obj
obj
DSPM
Sanpshot
Copy link
Copy Markdown
Contributor

@marketplace-ai-reviewer marketplace-ai-reviewer May 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Possible typo in known word

msgraph
remediations
MIP
remediates
sharepoint
1 change: 1 addition & 0 deletions Packs/RubrikPolaris/Classifiers/classifier-Rubrik_Polaris_Radar_-_Classification.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@
"id": "Rubrik Polaris Radar - Classification",
"keyTypeMap": {
"RubrikRadar": "Rubrik Radar",
"RubrikDSPMViolation": "Rubrik DSPM Violation",
"RubrikThreatMonitoringObject": "Rubrik Threat Monitoring Object"
},
"name": "Rubrik Polaris Radar - Classification",
Expand Down
260 changes: 260 additions & 0 deletions Packs/RubrikPolaris/Classifiers/classifier-Rubrik_Polaris_Radar_-_Mapping.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -211,6 +211,266 @@
"simple": "objectName"
}
}
},
"Rubrik DSPM Violation": {
"dontMapEventToLabels": false,
"internalMapping": {
"Incident Link": {
"complex": {
"filters": [],
"root": "incident_link",
"transformers": []
}
},
"Last Update Time": {
"complex": {
"filters": [],
"root": "lastUpdatedAt",
"transformers": []
}
},
"Policy Description": {
"complex": {
"accessor": "description",
"filters": [],
"root": "policy",
"transformers": []
}
},
"Policy ID": {
"complex": {
"accessor": "policyId",
"filters": [],
"root": "policy",
"transformers": []
}
},
"Policy Severity": {
"complex": {
"accessor": "policySeverity",
"filters": [],
"root": "policy",
"transformers": []
}
},
"Rubrik CDM Cluster ID": {
"complex": {
"accessor": "clusterUuid",
"filters": [],
"root": "resourceMetadata.metadata.clusterInfo",
"transformers": []
}
},
"Rubrik CDM Cluster Name": {
"complex": {
"accessor": "clusterName",
"filters": [],
"root": "resourceMetadata.metadata.clusterInfo",
"transformers": []
}
},
"Rubrik Create Time": {
"complex": {
"filters": [],
"root": "createdAt",
"transformers": []
}
},
"Rubrik Data Categories": {
"complex": {
"accessor": "dataCategories",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik Data Types": {
"complex": {
"accessor": "dataTypes",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik High Risk Hits": {
"complex": {
"accessor": "violatedHighRiskSensitiveHits",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik Low Risk Hits": {
"complex": {
"accessor": "violatedLowRiskSensitiveHits",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik Medium Risk Hits": {
"complex": {
"accessor": "violatedMediumRiskSensitiveHits",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik No Risk Hits": {
"complex": {
"accessor": "violatedNoRiskSensitiveHits",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik Object Account Name": {
"complex": {
"accessor": "accountName",
"filters": [],
"root": "resourceMetadata.metadata.cloudAccountInfo",
"transformers": []
}
},
"Rubrik Object Create Time": {
"complex": {
"accessor": "creationTime",
"filters": [],
"root": "resourceMetadata.metadata",
"transformers": [
{
"operator": "TimeStampToDate"
}
]
}
},
"Rubrik Object Location": {
"complex": {
"accessor": "physicalHost",
"filters": [],
"root": "resourceMetadata.metadata",
"transformers": []
}
},
"Rubrik Object Platform": {
"complex": {
"accessor": "platform",
"filters": [],
"root": "resourceMetadata.metadata",
"transformers": []
}
},
"Rubrik Object Region": {
"complex": {
"accessor": "region",
"filters": [],
"root": "resourceMetadata.metadata",
"transformers": []
}
},
"Rubrik Object location": {
"complex": {
"accessor": "physicalHost",
"filters": [],
"root": "resourceMetadata.metadata",
"transformers": []
}
},
"Rubrik Polaris Object ID": {
"complex": {
"filters": [],
"root": "resourceId",
"transformers": []
}
},
"Rubrik Polaris Object Name": {
"complex": {
"accessor": "name",
"filters": [],
"root": "resourceMetadata.metadata",
"transformers": []
}
},
"Rubrik Polaris Object Type": {
"complex": {
"accessor": "objectType",
"filters": [],
"root": "resourceMetadata.metadata",
"transformers": []
}
},
"Rubrik Policy Category": {
"complex": {
"accessor": "policyCategory",
"filters": [],
"root": "policy",
"transformers": []
}
},
"Rubrik Policy Name": {
"complex": {
"accessor": "name",
"filters": [],
"root": "policy",
"transformers": []
}
},
"Rubrik Snapshot ID": {
"complex": {
"accessor": "snapshotId",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik Total Risk Hits": {
"complex": {
"accessor": "violatedSensitiveHits",
"filters": [],
"root": "details",
"transformers": []
}
},
"Rubrik Violation ID": {
"complex": {
"filters": [],
"root": "policyViolationId",
"transformers": []
}
},
"Rubrik Violation Name": {
"complex": {
"filters": [],
"root": "name",
"transformers": []
}
},
"Rubrik Violation Status": {
"complex": {
"filters": [],
"root": "status",
"transformers": [
{
"args": {
"limit": {
"isContext": false
},
"replaceWith": {
"isContext": false
},
"toReplace": {
"isContext": false,
"value": {
"simple": "POLICY_VIOLATION_STATUS_"
}
}
},
"operator": "replace"
}
]
}
}
}
}
},
"name": "Rubrik Polaris Radar - Mapping",
Expand Down
3 changes: 2 additions & 1 deletion Packs/RubrikPolaris/IncidentFields/incidentfield-RubrikPolaris_Object_ID.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@
"associatedToAll": false,
"associatedTypes": [
"Rubrik Radar",
"Rubrik Threat Monitoring Object"
"Rubrik Threat Monitoring Object",
"Rubrik DSPM Violation"
],
"caseInsensitive": true,
"cliName": "rubrikpolarisobjectid",
Expand Down
3 changes: 2 additions & 1 deletion Packs/RubrikPolaris/IncidentFields/incidentfield-RubrikPolaris_Object_Name.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@
"associatedToAll": false,
"associatedTypes": [
"Rubrik Radar",
"Rubrik Threat Monitoring Object"
"Rubrik Threat Monitoring Object",
"Rubrik DSPM Violation"
],
"caseInsensitive": true,
"cliName": "rubrikpolarisobjectname",
Expand Down
3 changes: 2 additions & 1 deletion Packs/RubrikPolaris/IncidentFields/incidentfield-RubrikPolaris_Object_Type.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@
"associatedToAll": false,
"associatedTypes": [
"Rubrik Radar",
"Rubrik Threat Monitoring Object"
"Rubrik Threat Monitoring Object",
"Rubrik DSPM Violation"
],
"caseInsensitive": true,
"cliName": "rubrikpolarisobjecttype",
Expand Down
3 changes: 2 additions & 1 deletion Packs/RubrikPolaris/IncidentFields/incidentfield-Rubrik_CDM_Cluster_ID.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@
"associatedToAll": false,
"associatedTypes": [
"Rubrik Radar",
"Rubrik Threat Monitoring Object"
"Rubrik Threat Monitoring Object",
"Rubrik DSPM Violation"
],
"caseInsensitive": true,
"cliName": "rubrikcdmclusterid",
Expand Down
Loading
Loading