CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-05-06 03:17:53 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
2e53476a060eb2ccc1f41cccd8e1c307fbcfad78
securityonion/salt/elasticsearch/files/ingest
T
History
…
..
beats.common
…
common.nids
…
dns.tld
…
ecs
…
filterlog
…
http.status
FIX: Populate http.status_message field #3408
2021-03-11 16:42:20 -05:00
import.wel
so-import-evtx - fix ingest formatting
2021-09-15 14:13:16 -04:00
kratos
…
logscan.alert
…
osquery.live_query
…
osquery.normalize
Initial support for Live Queries in Hunt
2021-03-04 18:21:13 -05:00
osquery.query_result
Differentiate between event & ingest timestamp
2021-04-13 12:55:40 -04:00
ossec
…
rita.beacon
…
rita.connection
Add RITA Elasticsearch ingest pipeline config
2022-03-22 17:38:22 +00:00
rita.dns
…
strelka.file
Replace staging path with processed path for analyzed files
2021-07-14 15:04:46 +00:00
suricata.alert
…
suricata.common
…
suricata.dhcp
…
suricata.dnp3
…
suricata.dns
…
suricata.fileinfo
…
suricata.flow
Suricata Conn
2020-06-15 21:46:04 -04:00
suricata.ftp
…
suricata.ftp_data
Add initial suricata.ftp_data pipeline
2020-12-10 14:14:50 +00:00
suricata.http
FIX: Populate http.status_message field #3408
2021-03-11 16:42:20 -05:00
suricata.ikev2
…
suricata.krb5
…
suricata.nfs
…
suricata.rdp
…
suricata.sip
…
suricata.smb
…
suricata.smtp
…
suricata.snmp
…
suricata.ssh
…
suricata.tftp
…
suricata.tls
…
syslog
Update with changes from Abe's PR and other fixes
2022-03-25 13:57:44 -04:00
sysmon
update sysmon ingest parser and Sysmon File dashboard
2023-01-03 09:02:17 -05:00
win.eventlogs
…
zeek.bacnet
…
zeek.bacnet_discovery
…
zeek.bacnet_property
…
zeek.bsap_ip_header
Ensure ICS/SCADA pipelines are present
2022-12-06 15:58:47 +00:00
zeek.bsap_ip_rdb
…
zeek.bsap_ip_unknown
…
zeek.bsap_serial_header
…
zeek.bsap_serial_rdb
…
zeek.bsap_serial_rdb_ext
…
zeek.bsap_serial_unknown
…
zeek.cip
…
zeek.cip_identity
…
zeek.cip_io
…
zeek.common
…
zeek.common_ssl
…
zeek.conn
…
zeek.cotp
…
zeek.dce_rpc
…
zeek.dhcp
…
zeek.dnp3
…
zeek.dnp3_control
…
zeek.dnp3_objects
…
zeek.dns
…
zeek.dpd
modify pipelines
2020-03-14 12:03:32 +00:00
zeek.ecat_aoe_info
…
zeek.ecat_arp_info
…
zeek.ecat_coe_info
…
zeek.ecat_dev_info
…
zeek.ecat_foe_info
…
zeek.ecat_log_address
…
zeek.ecat_registers
…
zeek.ecat_soe_info
…
zeek.enip
…
zeek.files
remove duplicate line for message2.conn_uids
2020-07-09 06:44:08 -04:00
zeek.ftp
…
zeek.http
Initial support - Ingest community_id
2020-05-21 14:34:00 -04:00
zeek.intel
Fix Elasticsearch parsing for Zeek Intel Indicator #1309
2020-09-10 06:41:19 -04:00
zeek.irc
…
zeek.kerberos
…
zeek.modbus
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.modbus_detailed
…
zeek.modbus_mask_write_register
…
zeek.modbus_read_write_multiple_registers
…
zeek.mysql
…
zeek.notice
…
zeek.ntlm
…
zeek.opcua_binary
…
zeek.opcua_binary_activate_session
…
zeek.opcua_binary_activate_session_client_software_cert
…
zeek.opcua_binary_activate_session_diagnostic_info
…
zeek.opcua_binary_activate_session_locale_id
…
zeek.opcua_binary_browse
Ensure ICS/SCADA pipelines are present
2022-12-06 15:58:47 +00:00
zeek.opcua_binary_browse_description
…
zeek.opcua_binary_browse_diagnostic_info
…
zeek.opcua_binary_browse_request_continuation_point
…
zeek.opcua_binary_browse_response_references
…
zeek.opcua_binary_browse_result
Ensure ICS/SCADA pipelines are present
2022-12-06 15:58:47 +00:00
zeek.opcua_binary_create_session
…
zeek.opcua_binary_create_session_discovery
…
zeek.opcua_binary_create_session_endpoints
…
zeek.opcua_binary_create_session_user_token
…
zeek.opcua_binary_create_subscription
…
zeek.opcua_binary_diag_info_detail
…
zeek.opcua_binary_get_endpoints
…
zeek.opcua_binary_get_endpoints_description
…
zeek.opcua_binary_get_endpoints_discovery
…
zeek.opcua_binary_get_endpoints_locale_id
…
zeek.opcua_binary_get_endpoints_profile_uri
…
zeek.opcua_binary_get_endpoints_user_token
…
zeek.opcua_binary_opensecure_channel
…
zeek.opcua_binary_read
…
zeek.opcua_binary_read_array_dims
…
zeek.opcua_binary_read_array_dims_link
…
zeek.opcua_binary_read_diagnostic_info
…
zeek.opcua_binary_read_extension_object
…
zeek.opcua_binary_read_extension_object_link
…
zeek.opcua_binary_read_nodes_to_read
…
zeek.opcua_binary_read_results
Ensure ICS/SCADA pipelines are present
2022-12-06 15:58:47 +00:00
zeek.opcua_binary_read_results_link
…
zeek.opcua_binary_read_status_code
…
zeek.opcua_binary_read_variant_data
…
zeek.opcua_binary_read_variant_data_link
…
zeek.opcua_binary_status_code_detail
…
zeek.pe
…
zeek.profinet
…
zeek.profinet_dce_rpc
Add additional ICS/SCADA ingest node pipelines
2022-11-17 16:03:21 +00:00
zeek.radius
…
zeek.rdp
…
zeek.rfb
…
zeek.s7comm
…
zeek.s7comm_plus
…
zeek.s7comm_read_szl
…
zeek.s7comm_upload_download
…
zeek.signatures
…
zeek.sip
…
zeek.smb_files
…
zeek.smb_mapping
…
zeek.smtp
…
zeek.snmp
…
zeek.socks
…
zeek.software
…
zeek.ssh
fix zeek.ssh description
2020-07-01 20:26:06 -04:00
zeek.ssl
…
zeek.stun
…
zeek.stun_nat
…
zeek.syslog
…
zeek.tds
…
zeek.tds_rpc
…
zeek.tds_sql_batch
…
zeek.tunnel
…
zeek.tunnels
…
zeek.weird
…
zeek.wireguard
…
zeek.x509
…