The Google Cloud Security Community is upgrading platforms! Read more and check out our FAQ.

[rrazdan]

Hey Folks, Happy Holidays !!!

I am trying to look for a way to sort an array of integers in increasing order in the outcome section of my rule. The reason to do that is to specifically look for an indexed value which can only be found when the array is sorted in the increasing order.

My outcome section looks something like this and I am looking to sort the $Session_Diff array

$Session_Diff = array($NextLoginTime - $PreviousLogoffTime)

$Deltas = arrays.size($Session_Diff)

$count_previous_events = count_distinct($previous.metadata.event_timestamp.seconds)

$count_events = $count_previous_events + 1

$pointer = $count_events - 2

$final_result = arrays.index_to_int($Session_Diff, $pointer)

Thanks in advance.