Dennis Potashnik e12d710ab4 Fixed config typo

2021-03-02 11:51:46 +02:00

..

generic

Introduced dns_query log source category

2020-07-05 23:29:51 +02:00

mitre

+ Adding Mitre Sub-Techniques and python update script to fetch latest Pre, Enterprise & Mobile Tactics and Techniques from Mitre CTI

2020-08-13 10:24:44 +01:00

ala.yml

Squashed commit of the following:

2020-06-05 13:18:03 -04:00

arcsight-zeek.yml

Squashed commit of the following:

2020-06-05 13:18:03 -04:00

arcsight.yml

Added AppLocker log source

2020-07-13 20:41:54 +00:00

carbon-black.yml

Fix field mapping for DestinationHostname

2020-11-26 04:17:28 +01:00

crowdstrike.yml

Squashed commit of the following:

2020-06-05 13:18:03 -04:00

ecs-cloudtrail.yml

added role name field to ecs-cloudtrail.

2020-11-13 05:59:55 +05:00

ecs-dns.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

ecs-proxy.yml

New Backend - Kibana NDJSON

2020-11-05 23:34:25 +01:00

ecs-suricata.yml

Fix typo

2020-11-17 17:44:40 -05:00

ecs-zeek-corelight.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

ecs-zeek-elastic-beats-implementation.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

elk-defaultindex-filebeat.yml

docs: descriptions for source configs

2020-06-25 13:59:51 +02:00

elk-defaultindex-logstash.yml

docs: descriptions for source configs

2020-06-25 13:59:51 +02:00

elk-defaultindex.yml

docs: descriptions for source configs

2020-06-25 13:59:51 +02:00

elk-linux.yml

docs: descriptions for source configs

2020-06-25 13:59:51 +02:00

elk-windows.yml

Added AppLocker log source

2020-07-13 20:32:03 +00:00

elk-winlogbeat-sp.yml

Added AppLocker log source

2020-07-13 20:45:30 +00:00

elk-winlogbeat.yml

Added AppLocker log source

2020-07-13 20:44:03 +00:00

filebeat-defaultindex.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

fireeye-helix.yml

Add FirEye Helix backend

2020-11-19 11:18:28 -05:00

helk.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

humio.yml

Squashed commit of the following:

2020-06-05 13:18:03 -04:00

limacharlie.yml

change to github

2020-02-28 16:56:48 +07:00

logpoint-windows.yml

Added AppLocker log source

2020-07-13 20:46:49 +00:00

logstash-defaultindex.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

logstash-linux.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

logstash-windows.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

logstash-zeek-default-json.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

netwitness-epl.yml

initial commit for Netwitness-EPL backend

2020-09-10 17:12:12 +02:00

netwitness.yml

change to github

2020-02-28 16:56:48 +07:00

powershell-windows-all.yml

Added AppLocker log source

2020-07-13 20:30:02 +00:00

powershell.yml

Added AppLocker log source

2020-07-13 20:29:13 +00:00

qradar.yml

Squashed commit of the following:

2020-06-05 13:18:03 -04:00

qualys.yml

change to github

2020-02-28 16:56:48 +07:00

splunk-windows-index.yml

change to github

2020-02-28 16:56:48 +07:00

splunk-windows.yml

Added AppLocker log source

2020-07-13 20:27:52 +00:00

splunk-zeek.yml

Squashed commit of the following:

2020-06-05 13:18:03 -04:00

stix2.0.yml

Fixed config typo

2021-03-02 11:51:46 +02:00

stix-custom.yml

New configuration layout: stix2.0 for basic stix mapings, stix-shifter to match the OCA stix-shifter mappings and stix-custom for the unsupported mappings

2021-02-08 10:56:31 +02:00

stix-shifter.yml

Fixed error mapping for stix-shifter configuration

2021-02-08 17:55:03 +02:00

sumologic-cse.yml

Added:

2020-10-06 15:07:52 +03:00

sumologic.yml

Update sumologic.yml

2020-12-28 16:46:32 -05:00

sysmon.yml

Added:

2020-10-06 15:07:52 +03:00

thor.yml

fix: thor sources for applocker with wrong prefix

2021-01-07 12:27:37 +01:00

winlogbeat-modules-enabled.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

winlogbeat-old.yml

kibana-ndjson for all configs which already have kibana

2020-11-09 08:46:17 +01:00

winlogbeat.yml

Updated winlogbeat.yml config to include OriginalFileName

2020-11-26 14:48:14 -05:00