security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e53a97fa2fa8bcfdf414ba973728e78d2be6bc85
blue-team-tools/tools/config
T
History
neu5ron cbe5af01a1 on behalf of @socprime [SOC Prime Inc.](https://my.socprime.com/en/tdm/) 
add a total of 5 sigmac's (sigma configs) for 3 different backends. full git message to follow in PR.
2020-05-02 07:23:11 -04:00
..
generic
change to github
2020-02-28 16:56:48 +07:00
mitre
change to github
2020-02-28 16:56:48 +07:00
arcsight-zeek.yml
on behalf of @socprime [SOC Prime Inc.](https://my.socprime.com/en/tdm/)
2020-05-02 07:23:11 -04:00
arcsight.yml
change to github
2020-02-28 16:56:48 +07:00
carbon-black.yml
clean IP subnet
2020-03-18 16:49:44 +07:00
ecs-proxy.yml
more ECS to sigmac taxonomy for web/proxy
2020-03-14 14:57:38 -04:00
ecs-zeek-corelight.yml
on behalf of @socprime [SOC Prime Inc.](https://my.socprime.com/en/tdm/)
2020-05-02 07:23:11 -04:00
ecs-zeek-elastic-beats-implementation.yml
on behalf of @socprime [SOC Prime Inc.](https://my.socprime.com/en/tdm/)
2020-05-02 07:23:11 -04:00
filebeat-defaultindex.yml
change to github
2020-02-28 16:56:48 +07:00
helk.yml
merge
2020-03-19 11:02:10 +07:00
limacharlie.yml
change to github
2020-02-28 16:56:48 +07:00
logpoint-windows.yml
change to github
2020-02-28 16:56:48 +07:00
logstash-defaultindex.yml
change to github
2020-02-28 16:56:48 +07:00
logstash-linux.yml
change to github
2020-02-28 16:56:48 +07:00
logstash-windows.yml
change to github
2020-02-28 16:56:48 +07:00
logstash-zeek-default-json.yml
on behalf of @socprime [SOC Prime Inc.](https://my.socprime.com/en/tdm/)
2020-05-02 07:23:11 -04:00
netwitness.yml
change to github
2020-02-28 16:56:48 +07:00
powershell.yml
change to github
2020-02-28 16:56:48 +07:00
qradar.yml
merge
2020-03-19 11:02:10 +07:00
qualys.yml
change to github
2020-02-28 16:56:48 +07:00
splunk-windows-index.yml
change to github
2020-02-28 16:56:48 +07:00
splunk-windows.yml
change to github
2020-02-28 16:56:48 +07:00
splunk-zeek.yml
on behalf of @socprime [SOC Prime Inc.](https://my.socprime.com/en/tdm/)
2020-05-02 07:23:11 -04:00
sumologic.yml
merge
2020-03-19 11:02:10 +07:00
thor.yml
change to github
2020-02-28 16:56:48 +07:00
winlogbeat-modules-enabled.yml
Add Winlogbeat's RuleName field to mapping
2020-03-19 19:40:18 +01:00
winlogbeat-old.yml
merge
2020-03-19 11:02:10 +07:00
winlogbeat.yml
Add Winlogbeat's RuleName field to mapping
2020-03-19 19:40:18 +01:00