CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update defaults.yaml

Browse Source
This commit is contained in:
bryant-treacle
2023-08-08 15:28:06 -04:00
committed by GitHub
parent bcd1ccd91b
commit 3d4fd08547
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
salt/soc/defaults.yaml
View File

@@ -570,14 +570,13 @@ soc:
- destination.geo.country_iso_code - destination.geo.country_iso_code
- user.name - user.name
- source.ip - source.ip
':windows.sysmon_operational:': '::sysmon_operational':
- soc_timestamp - soc_timestamp
- event.action - event.action
- process.executable - winlog.computer_name
- user.name - user.name
- file.target - process.executable
- dns.question.name - process.pid
- winlog.event_data.TargetObject
'::network_connection': '::network_connection':
- soc_timestamp - soc_timestamp
- source.ip - source.ip