frack113 fb755788ab Normalize LF

2023-03-02 17:52:48 +01:00

..

fortisiem

Normalize LF

2023-03-02 17:52:48 +01:00

generic

feat: update config files

2023-01-17 01:00:24 +01:00

mitre

mitre_update: updates resulting json to current state

2022-08-03 14:05:34 -05:00

ala-azure-activitylogs.yml

…

ala-azure-ad_auditlogs.yml

…

ala-azure-aws_cloudtrail.yml

…

ala-suricata.yml

…

ala.yml

…

arcsight-zeek.yml

Update mapping

2023-01-02 19:31:00 +01:00

arcsight.yml

refactor: make antivirus a category

2022-03-24 11:59:33 +01:00

athena.yml

…

carbon-black-eedr.yml

…

carbon-black.yml

…

chronicle.yml

Update W3C field name

2023-01-02 16:39:55 +01:00

crowdstrike.yml

…

datadog.yml

Update datadog sigmac

2022-09-28 08:30:03 -04:00

devo-network.yml

…

devo-web.yml

Update W3C field name

2023-01-02 16:39:55 +01:00

devo-windows.yml

Update new registry category

2022-03-26 11:46:52 +01:00

dnif.yml

added new backend for DNIF queries

2022-06-30 13:03:54 +05:30

ecs-auditbeat-modules-enabled.yml

…

ecs-auditd.yml

…

ecs-azure-activitylogs.yml

…

ecs-azure-ad_auditlogs.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

ecs-azure-ad_signinlogs.yml

…

ecs-cloudtrail.yml

…

ecs-dns.yml

…

ecs-filebeat.yml

…

ecs-ms365_defender.yml

…

ecs-okta.yml

…

ecs-proxy.yml

Update mapping

2023-01-02 19:31:00 +01:00

ecs-suricata.yml

…

ecs-zeek-corelight.yml

Update mapping

2023-01-02 19:31:00 +01:00

ecs-zeek-elastic-beats-implementation.yml

Update mapping

2023-01-02 19:31:00 +01:00

elk-defaultindex-filebeat.yml

…

elk-defaultindex-logstash.yml

…

elk-defaultindex.yml

…

elk-linux.yml

…

elk-windows.yml

feat: update config files

2023-01-17 01:00:24 +01:00

elk-winlogbeat-sp.yml

feat: update config files

2023-01-17 01:00:24 +01:00

elk-winlogbeat.yml

feat: update config files

2023-01-17 01:00:24 +01:00

filebeat-defaultindex.yml

…

fireeye-helix.yml

feat: update config files

2023-01-17 01:00:24 +01:00

fortisiem-windows.yml

Update config

2022-08-16 20:18:46 +01:00

hawk.yml

feat: update config files

2023-01-17 01:00:24 +01:00

helk.yml

…

humio.yml

Update mapping

2023-01-02 19:31:00 +01:00

limacharlie.yml

refactor: first bigger log source refactoring

2022-03-22 17:58:29 +01:00

logpoint-windows.yml

feat: update config files

2023-01-17 01:00:24 +01:00

logrhythm_winevent.yml

…

logstash-defaultindex.yml

…

logstash-linux.yml

…

logstash-windows.yml

feat: update config files

2023-01-17 01:00:24 +01:00

logstash-zeek-default-json.yml

Update mapping

2023-01-02 19:31:00 +01:00

netwitness-epl.yml

Update mapping

2023-01-02 19:31:00 +01:00

netwitness.yml

Update mapping

2023-01-02 19:31:00 +01:00

powershell.yml

feat: update config files

2023-01-17 01:00:24 +01:00

qradar.yml

Update mapping

2023-01-02 19:31:00 +01:00

qualys.yml

…

splunk-windows-index.yml

…

splunk-windows.yml

feat: update config files

2023-01-17 01:00:24 +01:00

splunk-zeek.yml

Update mapping

2023-01-02 19:33:24 +01:00

stix2.0.yml

…

stix-custom.yml

…

stix-shifter.yml

…

streamalert.yml

Add StreamAlert backend

2022-05-03 17:32:19 +07:00

sumologic-cse.yml

refactor: make antivirus a category

2022-03-24 11:59:33 +01:00

sumologic.yml

feat: update config files

2023-01-17 01:00:24 +01:00

thor.yml

feat: update config files

2023-01-17 01:00:24 +01:00

uberagent.yml

Add more entries to exclusion configuration.

2022-04-13 15:53:19 +02:00

winlogbeat-modules-enabled.yml

feat: update config files

2023-01-17 01:00:24 +01:00

winlogbeat-old.yml

feat: update config files

2023-01-17 01:00:24 +01:00

winlogbeat.yml

fix: broken winlogbeat bitlocker config

2023-01-17 19:13:33 +01:00

zircolite.yml

feat: update config files

2023-01-17 01:00:24 +01:00