 Mike Reeves
|
0e2753393b
|
Remove BG for filecheck
|
2022-11-28 09:09:25 -05:00 |
|
 Doug Burks
|
b06e9e8477
|
add new zeek opcua logs to so-zeek-logs
|
2022-11-26 18:44:28 -05:00 |
|
|
Doug Burks
|
45892400cb
|
add new zeek opcua logs to so-whiptail
|
2022-11-26 18:42:51 -05:00 |
|
|
Doug Burks
|
1f0c984b98
|
add new zeek opcua logs to so-functions
|
2022-11-26 18:41:12 -05:00 |
|
|
doug
|
6d814d3909
|
add more zeek opcua parsers
|
2022-11-26 17:43:58 -05:00 |
|
|
Doug Burks
|
9ea59355d5
|
fix opcua_binary_opensecure_channel in so-functions
|
2022-11-26 17:03:57 -05:00 |
|
|
Doug Burks
|
c1287a61af
|
add opcua_binary_opensecure_channel to so-functions
|
2022-11-26 17:02:04 -05:00 |
|
|
Doug Burks
|
e44c94c56b
|
add opcua_binary_opensecure_channel to so-whiptail
|
2022-11-26 17:01:11 -05:00 |
|
|
Doug Burks
|
ec0cf71c3f
|
add opcua_binary_opensecure_channel to so-zeek-logs
|
2022-11-26 17:00:32 -05:00 |
|
|
doug
|
73adc571de
|
add more zeek ics parsers
|
2022-11-26 10:36:49 -05:00 |
|
|
doug
|
62c1bb2c0c
|
disable ecat_arp_info since it records all arp traffic
|
2022-11-25 18:01:53 -05:00 |
|
|
Doug Burks
|
692ec05b2d
|
fix opcua_binary_activate_session in hunt.eventfields.json
|
2022-11-25 17:51:25 -05:00 |
|
|
Doug Burks
|
00078fd9e5
|
add opcua_binary_activate_session_diagnostic_info to hunt.eventfields.json
|
2022-11-25 17:47:41 -05:00 |
|
|
Doug Burks
|
13c8fb0004
|
add ecat_coe_info to hunt.eventfields.json
|
2022-11-25 17:45:28 -05:00 |
|
|
Doug Burks
|
920b16e494
|
add ecat_dev_info to hunt.eventfields.json
|
2022-11-25 17:42:59 -05:00 |
|
|
Doug Burks
|
d98c57510a
|
add opcua_binary_activate_session_locale_id to hunt.eventfields.json
|
2022-11-25 17:39:17 -05:00 |
|
|
Doug Burks
|
58aa730437
|
add opcua_binary_create_session_endpoints to hunt.eventfields.json
|
2022-11-25 17:37:10 -05:00 |
|
|
Doug Burks
|
f36da68009
|
add opcua_binary_create_subscription to hunt.eventfields.json
|
2022-11-25 17:35:02 -05:00 |
|
|
Doug Burks
|
0091675ab6
|
fix opcua_binary_get_endpoints_description in hunt.eventfields.json
|
2022-11-25 17:32:30 -05:00 |
|
|
Doug Burks
|
83d25a97d3
|
add opcua_binary_get_endpoints_description to hunt.eventfields.json
|
2022-11-25 16:01:40 -05:00 |
|
|
Doug Burks
|
e536568c8a
|
add opcua_binary_activate_session to hunt.eventfields.json
|
2022-11-25 15:59:17 -05:00 |
|
|
Doug Burks
|
a00eb9071f
|
add opcua_binary_get_endpoints to hunt.eventfields.json
|
2022-11-25 15:57:35 -05:00 |
|
|
Doug Burks
|
c39cd9a290
|
add opcua_binary_browse_result to hunt.eventfields.json
|
2022-11-25 15:55:59 -05:00 |
|
|
Doug Burks
|
cb5483d401
|
add opcua_binary_create_session to hunt.eventfields.json
|
2022-11-25 15:53:09 -05:00 |
|
|
Doug Burks
|
fab0d17314
|
add opcua_binary_browse_description to hunt.eventfields.json
|
2022-11-25 15:51:49 -05:00 |
|
|
Doug Burks
|
465e6c4605
|
add opcua_binary_create_session_user_token to hunt.eventfields.json
|
2022-11-25 15:48:11 -05:00 |
|
|
Doug Burks
|
a119d6a842
|
add opcua_binary_get_endpoints_user_token to hunt.eventfields.json
|
2022-11-25 15:46:35 -05:00 |
|
|
Doug Burks
|
be8ce43b74
|
add opcua_binary_browse to hunt.eventfields.json
|
2022-11-25 15:44:22 -05:00 |
|
|
Doug Burks
|
b2a33d4800
|
add opcua_binary_browse_response_references to hunt.eventfields.json
|
2022-11-25 15:41:48 -05:00 |
|
|
Doug Burks
|
78fac49e66
|
add opcua_binary_read to hunt.eventfields.json
|
2022-11-25 15:39:58 -05:00 |
|
|
Doug Burks
|
ca08989404
|
add cip_io to hunt.eventfields.json
|
2022-11-25 15:37:21 -05:00 |
|
|
Doug Burks
|
4ed757916e
|
add opcua_binary_status_code_detail to hunt.eventfields.json
|
2022-11-25 15:35:17 -05:00 |
|
|
Doug Burks
|
676c543178
|
add opcua_binary to hunt.eventfields.json
|
2022-11-25 15:33:13 -05:00 |
|
|
Doug Burks
|
aa2eab5738
|
fix zeek ics logs in so-functions
|
2022-11-25 09:53:11 -05:00 |
|
|
Doug Burks
|
fe21b8bc17
|
fix zeek ics logs in so-functions
|
2022-11-25 09:45:18 -05:00 |
|
|
Doug Burks
|
33a478ff59
|
fix zeek ics logs in so-zeek-logs
|
2022-11-25 09:40:48 -05:00 |
|
|
Doug Burks
|
62fee1f420
|
fix zeek ics logs in so-whiptail
|
2022-11-25 09:39:58 -05:00 |
|
|
Doug Burks
|
2ada4712bc
|
fix zeek ics logs in so-zeek-logs
|
2022-11-25 09:37:52 -05:00 |
|
|
Doug Burks
|
fad6c46e7c
|
fix zeek ics logs in so-zeek-logs
|
2022-11-25 09:35:00 -05:00 |
|
|
Doug Burks
|
6f27c1b21e
|
fix zeek logs in so-whiptail
|
2022-11-25 09:26:54 -05:00 |
|
|
Doug Burks
|
0afb20ffa8
|
fix ics entries in so-functions
|
2022-11-25 09:19:11 -05:00 |
|
|
Doug Burks
|
40688a6076
|
add Zeek software to so-functions
|
2022-11-25 07:36:41 -05:00 |
|
|
Doug Burks
|
9431bf1c2a
|
add Zeek software log to so-whiptail
|
2022-11-25 07:28:48 -05:00 |
|
|
Doug Burks
|
9f5e75b302
|
add software to so-zeek-logs
|
2022-11-25 07:27:50 -05:00 |
|
|
Doug Burks
|
3f62cddc3b
|
change . to _
|
2022-11-23 12:21:12 -05:00 |
|
|
Doug Burks
|
085420997c
|
move status_code before status_code.link_id
|
2022-11-23 12:11:04 -05:00 |
|
|
Doug Burks
|
723e145eeb
|
Merge pull request #9221 from Security-Onion-Solutions/dougburks-patch-1
fix descriptions
|
2022-11-23 11:43:12 -05:00 |
|
|
Doug Burks
|
0a1d0d35c8
|
fix description
|
2022-11-23 11:33:31 -05:00 |
|
|
Doug Burks
|
9ee96f2280
|
fix description
|
2022-11-23 11:32:09 -05:00 |
|
|
Doug Burks
|
3871268c19
|
Merge pull request #9220 from Security-Onion-Solutions/fix/zeek-opcua-parsing
fix zeek opcua pipelines
|
2022-11-23 11:17:47 -05:00 |
|