CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-05-01 00:47:54 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
11babd2f1c932e1b5438b747260a70bc013a4acd
securityonion/salt/elasticsearch/files/ingest
T
History
Doug Burks 272b345892 FIX: Suricata DNS A and CNAME parsing #10117
2023-04-13 10:52:37 -04:00
..
beats.common
…
common.nids
…
dns.tld
…
ecs
…
filterlog
…
http.status
…
import.wel
…
kratos
…
logscan.alert
…
osquery.live_query
…
osquery.normalize
…
osquery.query_result
…
ossec
…
rita.beacon
Update RITA beacon parsing
2023-01-03 16:01:35 +00:00
rita.connection
…
rita.dns
…
strelka.file
…
suricata.alert
…
suricata.common
…
suricata.dhcp
update Suricata DHCP parser to set server.address
2023-01-30 15:57:47 -05:00
suricata.dnp3
…
suricata.dns
FIX: Suricata DNS A and CNAME parsing #10117
2023-04-13 10:52:37 -04:00
suricata.fileinfo
…
suricata.flow
…
suricata.ftp
…
suricata.ftp_data
…
suricata.http
…
suricata.ikev2
…
suricata.krb5
…
suricata.nfs
…
suricata.rdp
…
suricata.sip
…
suricata.smb
…
suricata.smtp
…
suricata.snmp
…
suricata.ssh
…
suricata.tftp
…
suricata.tls
…
syslog
…
sysmon
update sysmon parser
2022-12-30 16:20:06 -05:00
win.eventlogs
…
zeek.bacnet
Use native 'is_orig' since we are already using that field name for other logs
2022-11-29 21:21:41 +00:00
zeek.bacnet_discovery
Use native 'is_orig' since we are already using that field name for other logs
2022-11-29 21:21:41 +00:00
zeek.bacnet_property
Use native 'is_orig' since we are already using that field name for other logs
2022-11-29 21:21:41 +00:00
zeek.bsap_ip_header
fix more typos
2022-11-29 07:16:30 -05:00
zeek.bsap_ip_rdb
Various field renames
2022-11-29 21:32:05 +00:00
zeek.bsap_ip_unknown
fix more typos
2022-11-29 07:16:30 -05:00
zeek.bsap_serial_header
Change 'bsap.node.status.byte' to 'bsap.node.status_byte'
2022-11-30 13:01:30 -05:00
zeek.bsap_serial_rdb
fix more typos
2022-11-29 07:16:30 -05:00
zeek.bsap_serial_rdb_ext
Change 'bsap.node.status_byte' to 'bsap.node_status_byte'.
2022-11-30 15:24:53 +00:00
zeek.bsap_serial_unknown
fix more typos
2022-11-29 07:16:30 -05:00
zeek.cip
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.cip_identity
Various field renames
2022-11-29 21:32:05 +00:00
zeek.cip_io
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.common
…
zeek.common_ssl
…
zeek.conn
Check if connection.state is populated before trying to assess its value
2022-11-29 19:00:47 +00:00
zeek.cotp
…
zeek.dce_rpc
…
zeek.dhcp
…
zeek.dnp3
…
zeek.dnp3_control
Add Zeek dnp3_control ingest pipeline
2022-11-29 17:18:24 +00:00
zeek.dnp3_objects
…
zeek.dns
…
zeek.dpd
…
zeek.ecat_aoe_info
…
zeek.ecat_arp_info
…
zeek.ecat_coe_info
Various field renames
2022-11-29 21:32:05 +00:00
zeek.ecat_dev_info
Various field renames
2022-11-29 21:32:05 +00:00
zeek.ecat_foe_info
More field updates
2022-11-30 15:22:02 +00:00
zeek.ecat_log_address
…
zeek.ecat_registers
…
zeek.ecat_soe_info
…
zeek.enip
Use native 'is_orig' since we are already using that field name for other logs
2022-11-29 21:21:41 +00:00
zeek.files
…
zeek.ftp
…
zeek.http
…
zeek.intel
…
zeek.irc
…
zeek.kerberos
…
zeek.modbus
…
zeek.modbus_detailed
Various field renames
2022-11-29 21:32:05 +00:00
zeek.modbus_mask_write_register
Various field renames
2022-11-29 21:32:05 +00:00
zeek.modbus_read_write_multiple_registers
Various field renames
2022-11-29 21:32:05 +00:00
zeek.mysql
…
zeek.notice
…
zeek.ntlm
…
zeek.opcua_binary
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.opcua_binary_activate_session
Add space per request
2022-11-29 14:14:08 -05:00
zeek.opcua_binary_activate_session_client_software_cert
Use native link_id naming scheme for now
2022-11-29 22:05:37 +00:00
zeek.opcua_binary_activate_session_diagnostic_info
Use native link_id naming scheme for now
2022-11-29 22:05:37 +00:00
zeek.opcua_binary_activate_session_locale_id
…
zeek.opcua_binary_browse
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.opcua_binary_browse_description
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.opcua_binary_browse_diagnostic_info
Use native link_id naming scheme for now
2022-11-29 22:05:37 +00:00
zeek.opcua_binary_browse_request_continuation_point
…
zeek.opcua_binary_browse_response_references
…
zeek.opcua_binary_browse_result
Use native link_id naming scheme for now
2022-11-29 22:05:37 +00:00
zeek.opcua_binary_create_session
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.opcua_binary_create_session_discovery
…
zeek.opcua_binary_create_session_endpoints
Add space per request
2022-11-29 14:14:37 -05:00
zeek.opcua_binary_create_session_user_token
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.opcua_binary_create_subscription
…
zeek.opcua_binary_diag_info_detail
…
zeek.opcua_binary_get_endpoints
…
zeek.opcua_binary_get_endpoints_description
Add space per request
2022-11-29 14:12:52 -05:00
zeek.opcua_binary_get_endpoints_discovery
…
zeek.opcua_binary_get_endpoints_locale_id
…
zeek.opcua_binary_get_endpoints_profile_uri
…
zeek.opcua_binary_get_endpoints_user_token
Additional field renames and updates
2022-11-30 15:01:41 +00:00
zeek.opcua_binary_opensecure_channel
…
zeek.opcua_binary_read
…
zeek.opcua_binary_read_array_dims
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_array_dims_link
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_diagnostic_info
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_extension_object
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_extension_object_link
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_nodes_to_read
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_results
…
zeek.opcua_binary_read_results_link
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_status_code
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_variant_data
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_read_variant_data_link
add more zeek opcua parsers
2022-11-26 17:43:58 -05:00
zeek.opcua_binary_status_code_detail
…
zeek.pe
…
zeek.profinet
…
zeek.profinet_dce_rpc
…
zeek.radius
…
zeek.rdp
…
zeek.rfb
…
zeek.s7comm
update zeek s7comm parsers
2022-11-29 07:50:21 -05:00
zeek.s7comm_plus
update zeek s7comm parsers
2022-11-29 07:50:21 -05:00
zeek.s7comm_read_szl
…
zeek.s7comm_upload_download
Add Zeek s7comm_upload_download ingest pipeline
2022-11-29 19:45:56 +00:00
zeek.signatures
…
zeek.sip
…
zeek.smb_files
…
zeek.smb_mapping
…
zeek.smtp
…
zeek.snmp
…
zeek.socks
…
zeek.software
…
zeek.ssh
…
zeek.ssl
…
zeek.stun
…
zeek.stun_nat
…
zeek.syslog
…
zeek.tds
update zeek tds parsers and dashboard
2022-11-29 07:43:20 -05:00
zeek.tds_rpc
update zeek tds parsers and dashboard
2022-11-29 07:43:20 -05:00
zeek.tds_sql_batch
update zeek tds parsers and dashboard
2022-11-29 07:43:20 -05:00
zeek.tunnel
…
zeek.tunnels
…
zeek.weird
…
zeek.wireguard
update zeek s7comm parsers
2022-11-29 07:50:21 -05:00
zeek.x509
…