CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-11 19:52:51 +01:00
Code Issues Packages Projects Releases Wiki Activity

add ti_opencti integration support

Browse Source
This commit is contained in:
reyesj2
2024-12-18 11:33:49 -06:00
parent 8183dcf363
commit 157185c370
4 changed files with 84 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
salt/elasticsearch/templates/component/elastic-agent/logs-ti_opencti.indicator@custom.json Normal file
View File

@@ -0,0 +1,36 @@
{
"template": {
"mappings": {
"properties": {
"host": {
"properties":{
"ip": {
"type": "ip"
}
}
},
"related": {
"properties":{
"ip": {
"type": "ip"
}
}
},
"destination": {
"properties":{
"ip": {
"type": "ip"
}
}
},
"source": {
"properties":{
"ip": {
"type": "ip"
}
}
}
}
}
}
}