CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-20 07:53:06 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
a08166f27dce5acf58e041b08a2e7b41904b73e9
securityonion/salt/elasticsearch/files/ingest
History
weslambert 4c74e7f308 Add event.kind and set name to module[dot]dataset
2021-06-02 15:35:26 -04:00
..
beats.common
initial refactor - beats/sysmon parsing
2020-07-28 11:03:33 -04:00
common
Update Sigmac mappings and config for IPs and ports
2021-03-16 09:05:35 -04:00
common.nids
Change rule_ruleset to rule.ruleset
2020-10-20 22:14:23 -04:00
dns.tld
Improve support for Suricata metadata #2200
2021-02-22 10:27:24 -05:00
filterlog
Switch to the ES-included community_id plugin
2021-04-29 12:08:07 -04:00
http.status
FIX: Populate http.status_message field #3408
2021-03-11 16:42:20 -05:00
import.wel
Add event.category to WEL
2020-09-10 06:15:30 -04:00
osquery.live_query
Initial support for Live Queries in Hunt
2021-03-04 18:21:13 -05:00
osquery.normalize
Initial support for Live Queries in Hunt
2021-03-04 18:21:13 -05:00
osquery.query_result
Differentiate between event & ingest timestamp
2021-04-13 12:55:40 -04:00
ossec
Create event.kind field and rename dataset to be module[dot]dataset
2021-06-02 15:33:18 -04:00
strelka.file
Add event.kind and set name to module[dot]dataset
2021-06-02 15:35:26 -04:00
suricata.alert
Update common.nids
2020-10-07 15:14:08 +00:00
suricata.common
Pull in Suricata changes
2021-02-19 11:01:15 -05:00
suricata.dhcp
FIX: Improve Suricata DHCP logging and parsing #3397
2021-03-11 11:01:51 -05:00
suricata.dnp3
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.dns
Improve support for Suricata metadata #2200
2021-02-22 13:49:29 -05:00
suricata.fileinfo
Improve support for Suricata metadata #2200
2021-02-22 10:27:24 -05:00
suricata.flow
Suricata Conn
2020-06-15 21:46:04 -04:00
suricata.ftp
Improve support for Suricata metadata #2200
2021-02-22 13:00:14 -05:00
suricata.ftp_data
Add initial suricata.ftp_data pipeline
2020-12-10 14:14:50 +00:00
suricata.http
FIX: Populate http.status_message field #3408
2021-03-11 16:42:20 -05:00
suricata.ikev2
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.krb5
Pull in Suricata changes
2021-02-19 11:01:15 -05:00
suricata.nfs
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.rdp
Pull in Suricata changes
2021-02-19 11:01:15 -05:00
suricata.sip
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.smb
Pull in Suricata changes
2021-02-19 11:01:15 -05:00
suricata.smtp
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.snmp
Pull in Suricata changes
2021-02-19 11:01:15 -05:00
suricata.ssh
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.tftp
Pull in Suricata changes
2021-02-19 11:01:15 -05:00
suricata.tls
Improve support for Suricata metadata #2200
2021-02-22 10:27:24 -05:00
syslog
Update syslog ingest parser to accomodate pfSense filterlog changes #3033
2021-02-19 08:02:32 -05:00
sysmon
Switch to the ES-included community_id plugin
2021-04-29 12:08:07 -04:00
win.eventlogs
Differentiate between event & ingest timestamp
2021-04-13 12:55:40 -04:00
zeek.common
Switch to the ES-included community_id plugin
2021-04-29 12:08:07 -04:00
zeek.common_ssl
…
zeek.conn
…
zeek.dce_rpc
…
zeek.dhcp
…
zeek.dnp3
…
zeek.dns
Improve support for Suricata metadata #2200
2021-02-22 10:27:24 -05:00
zeek.dpd
…
zeek.files
remove duplicate line for message2.conn_uids
2020-07-09 06:44:08 -04:00
zeek.ftp
fix zeek.ftp description
2020-07-01 20:27:40 -04:00
zeek.http
…
zeek.intel
Fix Elasticsearch parsing for Zeek Intel Indicator #1309
2020-09-10 06:41:19 -04:00
zeek.irc
…
zeek.kerberos
Addl krb fix
2020-06-30 03:06:01 +00:00
zeek.modbus
…
zeek.mysql
…
zeek.notice
…
zeek.ntlm
…
zeek.pe
…
zeek.radius
…
zeek.rdp
…
zeek.rfb
…
zeek.signatures
…
zeek.sip
…
zeek.smb_files
…
zeek.smb_mapping
fix zeek.smb_mapping description
2020-07-01 20:26:51 -04:00
zeek.smtp
…
zeek.snmp
…
zeek.socks
…
zeek.software
…
zeek.ssh
fix zeek.ssh description
2020-07-01 20:26:06 -04:00
zeek.ssl
…
zeek.syslog
…
zeek.tunnel
…
zeek.tunnels
Let zeek.common handle common fields for zeek.tunnels
2020-10-06 20:12:23 +00:00
zeek.weird
…
zeek.x509
rename id to log.id.fuid for X509
2020-06-15 16:55:14 +00:00