Thomas Patzke 516bfc88ff Added rule: RDP login from localhost

2019-01-28 22:43:22 +01:00

..

arcsight.yml

Fix YAML errors reported by yamllint

2019-01-10 09:51:39 +01:00

elk-defaultindex-filebeat.yml

Added default index configs for usual ELK setups

2017-11-09 10:05:41 +01:00

elk-defaultindex-logstash.yml

Added default index configs for usual ELK setups

2017-11-09 10:05:41 +01:00

elk-defaultindex.yml

Added ELK default index config

2017-10-23 00:45:33 +02:00

elk-linux.yml

Added default index handling

2017-10-23 00:08:39 +02:00

elk-windows.yml

Added Windows Driver Framework log source to configs

2017-11-09 08:42:58 +01:00

elk-winlogbeat.yml

Added rule: RDP login from localhost

2019-01-28 22:43:22 +01:00

helk.yml

Field-Index Mapping File & SIGMA Rules Field names fix

2018-12-11 09:27:26 +03:00

logpoint-windows-all.yml

Various rule fixes

2018-03-27 14:35:49 +02:00

netwitness.yml

Added NetWitness backend and tests

2018-10-31 14:07:59 -05:00

powershell-windows-all.yml

Removing invalid fieldmapping

2018-10-13 19:53:39 -05:00

qradar.yml

extending the qradar backend to allow for timeframe query

2019-01-11 03:33:49 +00:00

qualys.yml

Added ArcSight & Qualys backends

2018-06-07 16:18:23 +03:00

spark.yml

fix: SPARK config duplicate identifier

2018-11-27 14:05:13 +01:00

splunk-windows-all.yml

Windows NTLM

2018-06-13 00:08:46 +02:00

sumologic.yml

Fixed config and added index field

2018-12-10 22:37:39 +01:00