Roberto Rodriguez a0486edeea Field-Index Mapping File & SIGMA Rules Field names fix ...

+ Updated HELK field-index mapping file
+ After going through all the fields with 'fieldlist' output, I found a few rules that fixed.

2018-12-11 09:27:26 +03:00

..

arcsight.yml

Added ArcSight & Qualys backends

2018-06-07 16:18:23 +03:00

elk-defaultindex-filebeat.yml

Added default index configs for usual ELK setups

2017-11-09 10:05:41 +01:00

elk-defaultindex-logstash.yml

Added default index configs for usual ELK setups

2017-11-09 10:05:41 +01:00

elk-defaultindex.yml

Added ELK default index config

2017-10-23 00:45:33 +02:00

elk-linux.yml

Added default index handling

2017-10-23 00:08:39 +02:00

elk-windows.yml

Added Windows Driver Framework log source to configs

2017-11-09 08:42:58 +01:00

elk-winlogbeat.yml

Added Winlogbeat configuration

2018-09-20 12:08:11 +02:00

helk.yml

Field-Index Mapping File & SIGMA Rules Field names fix

2018-12-11 09:27:26 +03:00

logpoint-windows-all.yml

Various rule fixes

2018-03-27 14:35:49 +02:00

netwitness.yml

Added NetWitness backend and tests

2018-10-31 14:07:59 -05:00

powershell-windows-all.yml

Removing invalid fieldmapping

2018-10-13 19:53:39 -05:00

qradar.yml

added support flor flow data in qradar backend

2018-08-16 21:44:17 -07:00

qualys.yml

Added ArcSight & Qualys backends

2018-06-07 16:18:23 +03:00

spark.yml

fix: SPARK config duplicate identifier

2018-11-27 14:05:13 +01:00

splunk-windows-all.yml

Windows NTLM

2018-06-13 00:08:46 +02:00

sumologic.yml

Fixed config and added index field

2018-12-10 22:37:39 +01:00