408 Commits

Author	SHA1	Message	Date
Josh Brower	09bebf08d6	Fix FleetDM SOC Link	2023-02-09 09:10:50 -05:00
Doug Burks	d12aa0ed56	Move host.domain table to end of DHCP tables	2023-01-31 07:14:18 -05:00
Doug Burks	e3d32c7871	Improve default sysmon fields and add new network_connection fields	2023-01-04 07:38:18 -05:00
doug	5d060f9832	update Sysmon File dashboard	2022-12-31 14:10:02 -05:00
Doug Burks	3e1a5b6329	Improve Strelka dashboard	2022-12-21 15:34:06 -05:00
Doug Burks	b1709f3ea3	Improve Firewall dashboard	2022-12-21 15:28:41 -05:00
Doug Burks	76a73ea35c	Improve Software dashboard	2022-12-21 15:25:19 -05:00
Doug Burks	991a6ec43c	Improve Intel dashboard	2022-12-21 15:19:54 -05:00
Doug Burks	e2c0607249	Improve FTP dashboard	2022-12-21 14:36:44 -05:00
Doug Burks	82c61e6bc9	improve NIDS Alerts dashboard	2022-12-21 14:32:05 -05:00
Doug Burks	37aa779095	Minor improvements	2022-12-21 13:14:38 -05:00
Doug Burks	9e631ad63d	Improve SOC dashboards	2022-12-21 13:04:12 -05:00
Doug Burks	1279997ca9	update stun, tunnel, and wireguard dashboards in dashboards.queries.json	2022-11-30 10:59:00 -05:00
Wes	5d72f8d55a	Additional field renames and updates	2022-11-30 15:01:41 +00:00
Wes	5db3e22363	Add s7comm_upload_download references in various places	2022-11-29 19:58:18 +00:00
Doug Burks	7ea0aa87e4	add ICS COTP dashboard to dashboards.queries.json	2022-11-29 13:38:19 -05:00
Wes	16cd1080be	Add dnp3_control reference in various places	2022-11-29 17:23:37 +00:00
doug	4251331bd4	update zeek tds parsers and dashboard	2022-11-29 07:43:20 -05:00
Doug Burks	14ff5670f7	add bsap entries to hunt.eventfields.json	2022-11-29 06:48:20 -05:00
Doug Burks	2763b5846c	improve dashboard descriptions	2022-11-28 13:10:23 -05:00
Doug Burks	dd4c34397d	improve dashboard descriptions	2022-11-28 13:03:54 -05:00
Doug Burks	a796fa2ff7	make sure that ICS dashboards with sankey also have separate event.dataset table	2022-11-28 12:09:57 -05:00
Doug Burks	268253ce14	update ENIP dashboard	2022-11-28 12:05:35 -05:00
Doug Burks	6a2f886fcc	improve ecat dashboard	2022-11-28 12:01:35 -05:00
Doug Burks	63915b0486	consolidate DNP3 dashboards	2022-11-28 11:58:48 -05:00
Doug Burks	ce7b16a230	more ICS dashboards	2022-11-28 10:06:58 -05:00
Doug Burks	a4f5e7b2a6	add ECAT dashboard	2022-11-28 10:05:15 -05:00
Doug Burks	cfbbc3a1a3	add S7 dashboard	2022-11-28 10:02:33 -05:00
Doug Burks	11a7f051a6	organize dashboards	2022-11-28 09:57:54 -05:00
Doug Burks	cb06269b1a	update DNP3 and MODBUS dashboards	2022-11-28 09:40:42 -05:00
Doug Burks	692ec05b2d	fix opcua_binary_activate_session in hunt.eventfields.json	2022-11-25 17:51:25 -05:00
Doug Burks	00078fd9e5	add opcua_binary_activate_session_diagnostic_info to hunt.eventfields.json	2022-11-25 17:47:41 -05:00
Doug Burks	13c8fb0004	add ecat_coe_info to hunt.eventfields.json	2022-11-25 17:45:28 -05:00
Doug Burks	920b16e494	add ecat_dev_info to hunt.eventfields.json	2022-11-25 17:42:59 -05:00
Doug Burks	d98c57510a	add opcua_binary_activate_session_locale_id to hunt.eventfields.json	2022-11-25 17:39:17 -05:00
Doug Burks	58aa730437	add opcua_binary_create_session_endpoints to hunt.eventfields.json	2022-11-25 17:37:10 -05:00
Doug Burks	f36da68009	add opcua_binary_create_subscription to hunt.eventfields.json	2022-11-25 17:35:02 -05:00
Doug Burks	0091675ab6	fix opcua_binary_get_endpoints_description in hunt.eventfields.json	2022-11-25 17:32:30 -05:00
Doug Burks	83d25a97d3	add opcua_binary_get_endpoints_description to hunt.eventfields.json	2022-11-25 16:01:40 -05:00
Doug Burks	e536568c8a	add opcua_binary_activate_session to hunt.eventfields.json	2022-11-25 15:59:17 -05:00
Doug Burks	a00eb9071f	add opcua_binary_get_endpoints to hunt.eventfields.json	2022-11-25 15:57:35 -05:00
Doug Burks	c39cd9a290	add opcua_binary_browse_result to hunt.eventfields.json	2022-11-25 15:55:59 -05:00
Doug Burks	cb5483d401	add opcua_binary_create_session to hunt.eventfields.json	2022-11-25 15:53:09 -05:00
Doug Burks	fab0d17314	add opcua_binary_browse_description to hunt.eventfields.json	2022-11-25 15:51:49 -05:00
Doug Burks	465e6c4605	add opcua_binary_create_session_user_token to hunt.eventfields.json	2022-11-25 15:48:11 -05:00
Doug Burks	a119d6a842	add opcua_binary_get_endpoints_user_token to hunt.eventfields.json	2022-11-25 15:46:35 -05:00
Doug Burks	be8ce43b74	add opcua_binary_browse to hunt.eventfields.json	2022-11-25 15:44:22 -05:00
Doug Burks	b2a33d4800	add opcua_binary_browse_response_references to hunt.eventfields.json	2022-11-25 15:41:48 -05:00
Doug Burks	78fac49e66	add opcua_binary_read to hunt.eventfields.json	2022-11-25 15:39:58 -05:00
Doug Burks	ca08989404	add cip_io to hunt.eventfields.json	2022-11-25 15:37:21 -05:00