Thomas Patzke 8d6a507ec4 OSCD QA wave 1 ...

* Checked all rules against Mordor and EVTX samples datasets
* Added field names
* Some severity adjustments
* Fixes

2020-01-11 00:11:27 +01:00

..

generic

fix: fixed wrong field mapping in windows-audit source config

2019-11-09 22:42:00 +01:00

arcsight.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

ecs-proxy.yml

Added ECS proxy configuration

2019-12-09 16:34:07 +01:00

filebeat-defaultindex.yml

Cleanup of configuration names

2019-07-14 00:50:15 +02:00

helk.yml

update HELK config taxonomy/mapping for sigmac conversion

2019-10-01 10:14:54 -04:00

limacharlie.yml

Small refactors to make more readable and remove deprecated code paths to increase coverage.

2019-10-28 10:49:05 -05:00

logpoint-windows.yml

add GroupSid to other configs

2019-09-11 04:53:30 -04:00

logstash-defaultindex.yml

Cleanup of configuration names

2019-07-14 00:50:15 +02:00

logstash-linux.yml

Cleanup of configuration names

2019-07-14 00:50:15 +02:00

logstash-windows.yml

Cleanup of configuration names

2019-07-14 00:50:15 +02:00

netwitness.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

powershell.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

qradar.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

qualys.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

splunk-windows-index.yml

Cleanup of configuration names

2019-07-14 00:50:15 +02:00

splunk-windows.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

sumologic.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

thor.yml

Further proxy field name fixes (config + rules)

2019-12-07 00:23:30 +01:00

winlogbeat-modules-enabled.yml

OSCD QA wave 1

2020-01-11 00:11:27 +01:00

winlogbeat-old.yml

OSCD QA wave 1

2020-01-11 00:11:27 +01:00

winlogbeat.yml

OSCD QA wave 1

2020-01-11 00:11:27 +01:00