GitLab

Details
Content
Dependencies
Version History

Download With Dependencies

Pack for handling gitlab operations

Pack Contributors:

Martin Ohl

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Pack Contributors:

Martin Ohl

Contributions are welcome and appreciated. For more info, visit our Contribution Guide.

Integrations

Name	Description
GitLab v2	Integration to GitLab API.

Correlation Rules

Name	Description
Gitlab - User Permission Changed	Alert for change in user''s permissions change from Guest to Owner.

Integrations

Name	Description
GitLab Event Collector
GitLab v2	Integration to GitLab API.

Modeling Rules

Name	Description
Gitlab Mapping Rules

Parsing Rules

Name	Description
GitLab Parsing Rule

Playbooks

Name	Description
Gitlab - Guest user permission change	This playbook investigates a "User Permissions Changed” alert by gathering user and IP information and performs remediation based on the information gathered and received from the user. To link this playbook to the relevant alerts automatically, we recommend using the following filters when configuring the playbook triggers: Alert Source = Correlation AND Alert Name = Gitlab - Permission change from guest to owner Used Sub-playbooks: Enrichment for Verdict Block IP - Generic v3 Block Account - Generic v2

Name

Description

Gitlab - Guest user permission change

This playbook investigates a "User Permissions Changed” alert by gathering user and IP information and performs remediation based on the information gathered and received from the user. To link this playbook to the relevant alerts automatically, we recommend using the following filters when configuring the playbook triggers: Alert Source = Correlation AND Alert Name = Gitlab - Permission change from guest to owner

Used Sub-playbooks:

Enrichment for Verdict
Block IP - Generic v3
Block Account - Generic v2

XSIAM Dashboards

Name	Description
Gitlab Overview Dashboard	Gitlab Overview Dashboard - an overview based on Gitlab logs.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Playbooks	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (5)

Pack Name	Pack By
Common Playbooks	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR
Rasterize	By: Cortex XSOAR
Base	By: Cortex XSOAR

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	April 14, 2020
Last Release	November 6, 2024

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.

GitLab

Pack Contributors:

Pack Contributors:

Integrations

GitLab v2

Integrations

GitLab v2

Integrations

GitLab v2

Integrations

GitLab v2

Integrations

GitLab v2

Integrations

GitLab v2

Integrations

GitLab v2

Integrations

GitLab v2

Integrations

GitLab v2

PUBLISHER

PLATFORMS

INFO

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER