CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
a17a2ad3de1f31c8880408351e722ef7c36aabe8
securityonion/salt/elasticsearch/files/ingest
History
Wes Lambert 14559b081d Ensure Zeek logs without ts field have an @timestamp field associated
2020-10-12 17:19:23 +00:00
..
beats.common
initial refactor - beats/sysmon parsing
2020-07-28 11:03:33 -04:00
common
Filterlog config changes
2020-10-09 23:56:52 +00:00
common.nids
Don't use regex for determining rule type
2020-10-07 16:15:43 +00:00
filterlog
Add Community ID to pfsense filterlog #1501
2020-10-10 08:11:51 -04:00
import.wel
Add event.category to WEL
2020-09-10 06:15:30 -04:00
osquery.query_result
Osquery Parsing fix
2020-08-18 15:54:11 -04:00
ossec
Put back rule.category for Wazuh alerts
2020-10-05 11:34:29 -04:00
strelka.file
More fixes for rule field
2020-10-08 13:36:47 +00:00
suricata.alert
Update common.nids
2020-10-07 15:14:08 +00:00
suricata.common
explicitly set Suricata timestamp timezone to UTC
2020-07-14 15:49:46 -04:00
suricata.dhcp
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.dnp3
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.dns
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.fileinfo
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.flow
Suricata Conn
2020-06-15 21:46:04 -04:00
suricata.ftp
Add the makor Suricata parsers
2020-06-12 12:14:48 -04:00
suricata.http
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.ikev2
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.krb5
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.nfs
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.rdp
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.sip
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.smb
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.smtp
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.snmp
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.ssh
Fix Protocol
2020-06-12 12:28:29 -04:00
suricata.tftp
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
suricata.tls
Add mor suricata ingest parser types
2020-06-02 14:34:38 -04:00
syslog
Filterlog config changes
2020-10-09 23:56:52 +00:00
sysmon
Add initial parsing for Wazuh WEL/Sysmon
2020-09-28 19:04:21 +00:00
win.eventlogs
Add event.category to WEL
2020-09-10 06:15:30 -04:00
zeek.common
Ensure Zeek logs without ts field have an @timestamp field associated
2020-10-12 17:19:23 +00:00
zeek.common_ssl
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.conn
Rename tunnel_parents
2020-06-01 13:51:32 +00:00
zeek.dce_rpc
update DCE/RPC parsing
2020-05-15 18:19:05 +00:00
zeek.dhcp
fix message_types one more time :)
2020-05-16 15:03:27 +00:00
zeek.dnp3
update ingest files
2020-04-05 20:40:00 +00:00
zeek.dns
Add null safe operator for query name
2020-06-30 03:02:38 +00:00
zeek.dns.tld
fix dns tld failures
2020-05-18 08:32:37 -04:00
zeek.dpd
modify pipelines
2020-03-14 12:03:32 +00:00
zeek.files
remove duplicate line for message2.conn_uids
2020-07-09 06:44:08 -04:00
zeek.ftp
fix zeek.ftp description
2020-07-01 20:27:40 -04:00
zeek.http
Initial support - Ingest community_id
2020-05-21 14:34:00 -04:00
zeek.intel
Fix Elasticsearch parsing for Zeek Intel Indicator #1309
2020-09-10 06:41:19 -04:00
zeek.irc
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.kerberos
Addl krb fix
2020-06-30 03:06:01 +00:00
zeek.modbus
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.mysql
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.notice
Initial support - Ingest community_id
2020-05-21 14:34:00 -04:00
zeek.ntlm
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.pe
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.radius
fix framed_addr field
2020-05-29 11:55:18 +00:00
zeek.rdp
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.rfb
update ingest files
2020-04-05 20:40:00 +00:00
zeek.signatures
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.sip
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.smb_files
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.smb_mapping
fix zeek.smb_mapping description
2020-07-01 20:26:51 -04:00
zeek.smtp
Initial support - Ingest community_id
2020-05-21 14:34:00 -04:00
zeek.snmp
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.socks
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.software
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.ssh
fix zeek.ssh description
2020-07-01 20:26:06 -04:00
zeek.ssl
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.syslog
upadte ingest config
2020-03-11 12:13:53 +00:00
zeek.tunnel
modify pipelines
2020-03-14 12:03:32 +00:00
zeek.tunnels
Let zeek.common handle common fields for zeek.tunnels
2020-10-06 20:12:23 +00:00
zeek.weird
Add message rename
2020-04-01 11:31:57 -04:00
zeek.x509
rename id to log.id.fuid for X509
2020-06-15 16:55:14 +00:00