cg-techgw

Analytic rule "TI map Domain entity to Web Session Events (ASIM Web Session schema)" not processing Url

3

**Describe the bug** The rule "TI map Domain entity to Web Session Events (ASIM Web Session schema)" in the file https://github.com/Azure/Azure-Sentinel/blob/master/Solutions/Threat%20Intelligence%20(NEW)/Analytic%20Rules/DomainEntity_imWebSession.yaml Appears to have been written to map Threat Intel...

Fix filtering and field normalisation so as to allow for URL type IOC

4

Addresses #13238 Change(s): - Fix logic to allow for URL type indicators in rule Reason for Change(s): - faulty logic rendered rule unable to pull URL indicators from ThreatIntelIndicators, reducing...