securityonion

agent.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

aws.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

azure.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

base.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

cef.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

checkpoint.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

cisco.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

client.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

cloud.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

container.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

cyberark.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

data_stream.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

destination.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

dll.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

dns.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

ecs.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

elasticsearch.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

error.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

event.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

file.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

fortinet.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

gcp.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

google_workspace.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

group.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

host.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

http.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

juniper.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

kibana.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

log.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

logstash.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

microsoft.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

misp.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

netflow.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

network.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

o365.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

observer.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

okta.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

orchestrator.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

organization.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

package.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

process.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

redis.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

registry.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

rule.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

server.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

service.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

snyk.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

sophos.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

source.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

suricata.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

syslog.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

threat.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

tls.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

tracing.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

url.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

user_agent.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

user.json

Map user name to keyword and remove security subfield generation

2023-07-18 14:46:47 +00:00

vulnerability.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

winlog.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00

zeek.json

Modify base ECS mappings to include .security where possible, as well as custom analyzer definition

2022-03-02 14:19:36 +00:00