338 Commits

Author	SHA1	Message	Date
Doug Burks	a00eb9071f	add opcua_binary_get_endpoints to hunt.eventfields.json	2022-11-25 15:57:35 -05:00
Doug Burks	c39cd9a290	add opcua_binary_browse_result to hunt.eventfields.json	2022-11-25 15:55:59 -05:00
Doug Burks	cb5483d401	add opcua_binary_create_session to hunt.eventfields.json	2022-11-25 15:53:09 -05:00
Doug Burks	fab0d17314	add opcua_binary_browse_description to hunt.eventfields.json	2022-11-25 15:51:49 -05:00
Doug Burks	465e6c4605	add opcua_binary_create_session_user_token to hunt.eventfields.json	2022-11-25 15:48:11 -05:00
Doug Burks	a119d6a842	add opcua_binary_get_endpoints_user_token to hunt.eventfields.json	2022-11-25 15:46:35 -05:00
Doug Burks	be8ce43b74	add opcua_binary_browse to hunt.eventfields.json	2022-11-25 15:44:22 -05:00
Doug Burks	b2a33d4800	add opcua_binary_browse_response_references to hunt.eventfields.json	2022-11-25 15:41:48 -05:00
Doug Burks	78fac49e66	add opcua_binary_read to hunt.eventfields.json	2022-11-25 15:39:58 -05:00
Doug Burks	ca08989404	add cip_io to hunt.eventfields.json	2022-11-25 15:37:21 -05:00
Doug Burks	4ed757916e	add opcua_binary_status_code_detail to hunt.eventfields.json	2022-11-25 15:35:17 -05:00
Doug Burks	676c543178	add opcua_binary to hunt.eventfields.json	2022-11-25 15:33:13 -05:00
Doug Burks	7caf827b77	add ecat_aoe_info to hunt.eventfields.json	2022-11-22 13:33:06 -05:00
Doug Burks	f40ccb7eff	add bacnet_discovery to hunt.eventfields.json	2022-11-22 13:27:26 -05:00
Doug Burks	e0cd550820	update ecat_arp_info in hunt.eventfields.json	2022-11-22 13:23:45 -05:00
Doug Burks	4e5106c863	update ecat_arp_info in hunt.eventfields.json	2022-11-22 13:21:33 -05:00
Doug Burks	5a107c63b8	add source.mac and destination.mac to dashboards.queries.json	2022-11-22 13:16:47 -05:00
Doug Burks	8a9a13865c	add ecat_registers to hunt.eventfields.json	2022-11-22 13:12:24 -05:00
Doug Burks	9cd6273beb	update ecat_log_address in hunt.eventfields.json	2022-11-22 13:10:46 -05:00
Doug Burks	724b26228c	add ecat_log_address to hunt.eventfields.json	2022-11-22 13:09:27 -05:00
Doug Burks	24ee38369f	add cotp to hunt.eventfields.json	2022-11-22 12:49:33 -05:00
Doug Burks	10ac789fbf	add profinet_dce_rpc to hunt.eventfields.json	2022-11-22 11:08:24 -05:00
Doug Burks	db58a35562	add profinet to hunt.eventfields.json	2022-11-22 11:07:03 -05:00
Doug Burks	1ad7a0db59	add bacnet_property to hunt.eventfields.json	2022-11-22 11:05:26 -05:00
Doug Burks	af626fe3a1	add bacnet to hunt.eventfields.json	2022-11-22 11:03:45 -05:00
Doug Burks	073f5ed789	add dnp3_objects to hunt.eventfields.json	2022-11-22 11:02:21 -05:00
Doug Burks	bbcefea417	add s7comm_plus to hunt.eventfields.json	2022-11-22 10:58:42 -05:00
Doug Burks	73c282595d	update dnp3 in hunt.eventfields.json	2022-11-22 10:57:06 -05:00
Doug Burks	07a53db09a	add cip_identity to hunt.evenfields.json	2022-11-22 10:55:39 -05:00
Doug Burks	80e50fa7b4	add ecat_arp_info to hunt.eventfields.json	2022-11-22 10:53:48 -05:00
Doug Burks	84d333e915	add s7comm to hunt.eventfields.json	2022-11-22 10:51:06 -05:00
Doug Burks	ae582caa55	Add modbus_detailed to hunt.eventfields.json	2022-11-22 10:48:33 -05:00
Doug Burks	264ae2b9ac	add enip to hunt.eventfields.json	2022-11-22 10:45:20 -05:00
Doug Burks	b522c9eea4	reorder fields in hunt.eventfields.json	2022-11-22 10:43:01 -05:00
Doug Burks	51cc047933	add cip to hunt.eventfields.json	2022-11-22 10:40:22 -05:00
Doug Burks	2a805ac1a6	Add tds entries to hunt.eventfields.json	2022-11-22 10:29:55 -05:00
Doug Burks	595f615ed9	Add ICS dashboard	2022-11-22 10:22:55 -05:00
Doug Burks	aa7c39d312	Add dashboards for stun, tds, and wireguard	2022-11-22 10:08:39 -05:00
doug	84b2fc9c17	FEATURE: Improve local copy of docs in SOC #9097	2022-11-08 16:26:09 -05:00
Doug Burks	f4042263a3	Remove destination_geo.organization_name from Sysmon Network sankey diagram	2022-10-13 08:59:10 -04:00
doug	454a7a4799	FEATURE: Add new Sysmon dashboards #8870	2022-10-07 11:52:49 -04:00
bryant-treacle	82dff3e9da	Fix issues: 8591-8953	2022-08-30 13:48:53 +00:00
Doug Burks	32c29b28eb	revert to lower case #8469	2022-08-11 15:33:30 -04:00
Doug Burks	7bf2603414	revert to lower case #8469	2022-08-11 15:32:49 -04:00
Doug Burks	4003876465	FIX: Fix TLP options in Cases to align with TLP 2.0 #8469	2022-08-11 08:49:54 -04:00
Doug Burks	4c677961c4	FIX: Fix TLP options in Cases to align with TLP 2.0 #8469	2022-08-11 08:49:25 -04:00
Doug Burks	4c1585f8d8	FIX: Display PCAP menu action on Dashboards page #8343	2022-07-29 14:50:10 -04:00
Doug Burks	94c637449d	FIX: Improve default dashboards #8136	2022-06-21 12:53:06 -04:00
Doug Burks	dce415297c	improve readability in motd.md	2022-06-04 06:59:09 -04:00
Doug Burks	de126647f8	Update motd.md to include links to Dashboards and Cases	2022-06-04 06:55:08 -04:00