security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
4cd99e71bf71c9dfd9d2cd3545602a7abdc88942
blue-team-tools/tools/config
T
History
neu5ron 58ac26e531 more ECS to sigmac taxonomy for web/proxy
2020-03-14 14:57:38 -04:00
..
generic
fix: fixed wrong field mapping in windows-audit source config
2019-11-09 22:42:00 +01:00
mitre
Carbonblack, Arcsight ESM, Elastic Rule
2020-02-24 19:29:45 +02:00
arcsight.yml
Carbonblack, Arcsight ESM, Elastic Rule
2020-02-24 19:29:45 +02:00
carbon-black.yml
Carbonblack, Arcsight ESM, Elastic Rule
2020-02-24 19:29:45 +02:00
ecs-proxy.yml
more ECS to sigmac taxonomy for web/proxy
2020-03-14 14:57:38 -04:00
filebeat-defaultindex.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00
helk.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00
limacharlie.yml
Small refactors to make more readable and remove deprecated code paths to increase coverage.
2019-10-28 10:49:05 -05:00
logpoint-windows.yml
add GroupSid to other configs
2019-09-11 04:53:30 -04:00
logstash-defaultindex.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00
logstash-linux.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00
logstash-windows.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00
netwitness.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
powershell.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
qradar.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
qualys.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
splunk-windows-index.yml
Cleanup of configuration names
2019-07-14 00:50:15 +02:00
splunk-windows.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
splunk-zeek.yml
Improved Splunk Zeek configuration
2020-02-21 22:31:14 +01:00
sumologic.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
thor.yml
Further proxy field name fixes (config + rules)
2019-12-07 00:23:30 +01:00
winlogbeat-modules-enabled.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00
winlogbeat-old.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00
winlogbeat.yml
Added es-rule backend to all ES configurations
2020-02-24 23:20:48 +01:00