defensivedepth fed0c5739d Refactor correlations

2026-10-08 19:31:29 -04:00

..

assistant-chat-mappings.json

Cleaning up New ES Indexes

2025-09-08 09:13:23 -06:00

assistant-chat-settings.json

Cleaning up New ES Indexes

2025-09-08 09:13:23 -06:00

assistant-session-mappings.json

Cleaning up New ES Indexes

2025-09-08 09:13:23 -06:00

assistant-session-settings.json

Cleaning up New ES Indexes

2025-09-08 09:13:23 -06:00

case-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

case-settings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

common-dynamic-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

common-settings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

detection-mappings.json

Refactor correlations

2026-10-08 19:31:29 -04:00

detection-settings.json

Added so-detection mapping in elasticsearch

2024-01-31 10:39:47 -07:00

detections-alerts-mappings.json

ES|QL and Sigma correlation support

2026-10-07 11:26:32 -04:00

dtc-agent-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-base-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-client-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-destination-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-dns-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-ecs-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-event-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-file-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-host-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-http-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-network-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-observer-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-process-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-rule-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-service-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-source-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-syslog-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-user_agent-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-user-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

dtc-winlog-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

endgame-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

pb-override-destination-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

pb-override-source-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

so-file-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

so-ip-mappings.json

timestamp fix

2024-10-31 10:24:58 -04:00

so-rule-mappings.json

Remove security subfield

2023-07-18 19:00:50 +00:00

so-scan-mappings.json

Text mapping for scan.pe.flags

2024-01-24 15:10:42 +00:00

so-system-mappings.json

Add destination IP for so-system

2024-09-09 20:16:23 +00:00