Florian Roth ab3baa9463 Merge pull request #1534 from SpeedyFireCyclone/mdatp_serviceinstalled ...

MDATP ServiceInstalled mapping

2021-06-10 09:05:56 +02:00

..

ala.py

Added:

2020-10-06 15:07:52 +03:00

arcsight.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

base.py

Elastic: raise an error from the base backend if a rule has multiple conditions

2021-03-31 16:01:05 -04:00

carbonblack.py

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

chronicle.py

Chronicle Security Backend contributed by SOC Prime.

2021-03-12 12:21:44 +02:00

csharp.py

comments for usage

2020-04-11 15:47:23 +02:00

data.py

Moved Sysmon schema XML from contrib directory into module

2019-03-16 00:59:29 +01:00

discovery.py

Added Humio, Crowdstrike, Corelight

2020-05-08 13:41:52 +03:00

ee-outliers.py

Updated author reference in license

2020-05-11 11:47:56 +02:00

elasticsearch.py

Add support for Elastic EQL

2021-06-08 13:38:38 -04:00

exceptions.py

Changed copyright notices accordingly

2018-07-24 00:01:16 +02:00

fireeye-helix.py

Fix SyntaxWarning for 'is' on fireeye-helix backend

2021-04-17 12:55:13 +02:00

graylog.py

Graylog backend now derived from es-qs

2019-11-02 22:56:01 +01:00

humio.py

Added:

2020-10-06 15:07:52 +03:00

limacharlie.py

Add support for macOS rules and fix case sensitivity.

2021-04-28 16:49:59 -07:00

logiq.py

Fixes

2020-04-08 23:43:46 +02:00

logpoint.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

mdatp.py

MDATP ServiceInstalled event mapping

2021-06-03 21:43:52 +02:00

misc.py

Conditional field mapping for null values

2019-04-25 23:24:05 +02:00

mixins.py

Using rule ids as Kibana object id

2020-01-30 11:30:01 +01:00

netwitness-epl.py

Update netwitness-epl.py

2021-03-09 17:41:54 +01:00

netwitness.py

Update netwitness.py

2021-03-09 17:43:44 +01:00

powershell.py

partial(?) fix of #762

2020-05-16 14:51:58 +03:00

qradar.py

Optimizing Qradar query generation in cases where field definitions are missing

2021-01-26 15:24:44 +01:00

qualys.py

Default configurations for backends

2019-11-03 23:32:50 +01:00

splunk.py

Fixes

2020-10-23 15:31:00 +02:00

sql.py

Change to have raw log in rule results with SQL/SQlite Backends

2021-05-13 15:01:52 +02:00

sqlite.py

Remove unused function

2020-05-30 01:57:06 +02:00

stix.py

New configuration layout: stix2.0 for basic stix mapings, stix-shifter to match the OCA stix-shifter mappings and stix-custom for the unsupported mappings

2021-02-08 10:56:31 +02:00

sumologic.py

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

sysmon.py

fix: sysmon backend "startswith"

2021-05-26 15:42:16 +02:00

tools.py

fixed various spelling errors all over rules and source code

2021-02-24 14:43:13 +00:00

uberagent.py

Updated uberAgent backend to support version 6.1.

2021-05-18 12:07:09 +02:00