CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12751 from Security-Onion-Solutions/dougburks-patch-1

Browse Source 
FEATURE: Add Events table columns for event.module sigma #12743
This commit is contained in:
Doug Burks
2024-04-04 09:13:53 -04:00
committed by GitHub
parent c75c411426 5ec3b834fb
commit 7b4e207329
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
salt/soc/defaults.yaml
View File

@@ -1222,6 +1222,17 @@ soc:
- event_data.destination.port - event_data.destination.port
- event_data.process.executable - event_data.process.executable
- event_data.process.pid - event_data.process.pid
':sigma:':
- soc_timestamp
- rule.name
- event.severity_label
- event_data.event.dataset
- event_data.source.ip
- event_data.source.port
- event_data.destination.host
- event_data.destination.port
- event_data.process.executable
- event_data.process.pid
server: server:
bindAddress: 0.0.0.0:9822 bindAddress: 0.0.0.0:9822
baseUrl: / baseUrl: /
@@ -1915,6 +1926,17 @@ soc:
- event_data.destination.port - event_data.destination.port
- event_data.process.executable - event_data.process.executable
- event_data.process.pid - event_data.process.pid
':sigma:':
- soc_timestamp
- rule.name
- event.severity_label
- event_data.event.dataset
- event_data.source.ip
- event_data.source.port
- event_data.destination.host
- event_data.destination.port
- event_data.process.executable
- event_data.process.pid
':strelka:': ':strelka:':
- soc_timestamp - soc_timestamp
- file.name - file.name