Josh Brower 928e5ed832 Playbook/Nav Fixes - Issue #1064

2020-08-07 17:02:48 -04:00

..

beats.common

initial refactor - beats/sysmon parsing

2020-07-28 11:03:33 -04:00

common

More Playbook Fixes - Issue #1064

2020-08-07 13:35:43 -04:00

common_nids

…

osquery.query_result

Osquery & WLB Parsing Update for WEL & Sysmon

2020-07-31 16:06:15 -04:00

ossec

update wazuh fields and category

2020-03-30 14:24:01 +00:00

ossec.alert

Feature - low level alerts

2020-07-09 13:53:55 -04:00

sguild_nids

…

snort

…

strelka.file

add curlys

2020-07-14 17:36:52 -04:00

suricata.alert

Feature - low level alerts

2020-07-09 13:53:55 -04:00

suricata.common

explicitly set Suricata timestamp timezone to UTC

2020-07-14 15:49:46 -04:00

suricata.dhcp

…

suricata.dnp3

…

suricata.dns

…

suricata.fileinfo

…

suricata.flow

Suricata Conn

2020-06-15 21:46:04 -04:00

suricata.ftp

…

suricata.http

…

suricata.ikev2

…

suricata.krb5

…

suricata.nfs

…

suricata.rdp

…

suricata.sip

…

suricata.smb

…

suricata.smtp

…

suricata.snmp

…

suricata.ssh

Fix Protocol

2020-06-12 12:28:29 -04:00

suricata.tftp

…

suricata.tls

…

syslog

…

sysmon

Playbook/Nav Fixes - Issue #1064

2020-08-07 17:02:48 -04:00

win.eventlogs

Ingest Parsing Update for Sysmon/WEL

2020-08-06 13:11:47 -04:00

zeek.common

…

zeek.common_ssl

…

zeek.conn

…

zeek.dce_rpc

…

zeek.dhcp

…

zeek.dnp3

…

zeek.dns

Add null safe operator for query name

2020-06-30 03:02:38 +00:00

zeek.dns.tld

…

zeek.dpd

…

zeek.files

remove duplicate line for message2.conn_uids

2020-07-09 06:44:08 -04:00

zeek.ftp

fix zeek.ftp description

2020-07-01 20:27:40 -04:00

zeek.http

…

zeek.intel

…

zeek.irc

…

zeek.kerberos

Addl krb fix

2020-06-30 03:06:01 +00:00

zeek.modbus

…

zeek.mysql

…

zeek.notice

…

zeek.ntlm

…

zeek.pe

…

zeek.radius

…

zeek.rdp

…

zeek.rfb

…

zeek.signatures

…

zeek.sip

…

zeek.smb_files

…

zeek.smb_mapping

fix zeek.smb_mapping description

2020-07-01 20:26:51 -04:00

zeek.smtp

…

zeek.snmp

…

zeek.socks

…

zeek.software

…

zeek.ssh

fix zeek.ssh description

2020-07-01 20:26:06 -04:00

zeek.ssl

…

zeek.syslog

…

zeek.tunnel

…

zeek.tunnels

…

zeek.weird

…

zeek.x509

rename id to log.id.fuid for X509

2020-06-15 16:55:14 +00:00