From 29a7203670b4107b609c5e28b95d16b2e4674ce9 Mon Sep 17 00:00:00 2001
From: Grant Joy <9968195+grantjoy@users.noreply.github.com>
Date: Tue, 13 Jun 2023 14:42:48 -0700
Subject: [PATCH] Update schemas.py (#302)

---
 panther_analysis_tool/schemas.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/panther_analysis_tool/schemas.py b/panther_analysis_tool/schemas.py
index f290363e4..4a1338fb2 100644
--- a/panther_analysis_tool/schemas.py
+++ b/panther_analysis_tool/schemas.py
@@ -88,6 +88,7 @@ def validate(
     r"\.Anomaly|Suricata\.DNS|Syslog\.RFC3164|Syslog\.RFC5424|Zendesk\.Audit|Zendesk"
     r"\.AuditLog|Zoom\.Activity|Zoom\.Operation"
     r"|SentinelOne\.Activity|SentinelOne\.DeepVisibility|SentinelOne\.DeepVisibilityV2"
+    r"|Tailscale\.Audit|Tailscale\.Network"
     r"|Tines\.Audit"
     r"|Zeek\.CaptureLoss|Zeek\.Conn|Zeek\.DHCP|Zeek\.DNS|Zeek\.DPD|Zeek\.Files|Zeek\.HTTP|Zeek\.Notice|Zeek\.NTP|Zeek\.OCSP|Zeek\.Reporter|Zeek\.SIP|Zeek\.Software|Zeek\.Ssh|Zeek\.Ssl|Zeek\.Stats|Zeek\.Tunnel|Zeek\.Weird|Zeek\.X509"
     r"|Custom\.([A-Z][A-Za-z0-9]*)(\.[A-Z][A-Za-z0-9]*){0,5})$"