Commit Graph

Select branches

Hide Pull Requests

azure

developer

feature/sysmon-for-linux

main

revert-50-developer

#12

#13

#14

#15

#16

#28

#30

#33

#36

#38

#40

#41

#42

#43

#44

#45

#46

#47

#49

#50

#6

#7

#8

Mono Color

• d0e449c935 Sysmon v15.15 4.90 Schema Version main Roberto Rodriguez 2025-01-22 03:37:08 -05:00
• b8d1e95abf Revert "Merge pull request #49 from OTRF/main" revert-50-developer Jose Rodriguez 2024-08-19 12:05:45 -04:00
• 561ec4d04a Merge pull request #50 from OTRF/developer Jose Rodriguez 2024-08-19 12:04:08 -04:00
• 16c854a473 Merge pull request #49 from OTRF/main developer Jose Rodriguez 2024-08-19 12:03:24 -04:00
• 5e16ccfe54 Merge pull request #47 from Kyrasuum/main Jose Rodriguez 2022-10-11 09:50:23 -04:00
• 62ba88ac47 Fixed some typos with invalid yaml Phillip Lorentz 2022-09-23 10:27:40 -04:00
• e3a9f5c261 Merge pull request #46 from OTRF/developer Jose Rodriguez 2022-09-22 23:21:06 -04:00
• fb6cb0f761 Updated Microsoft-Windows-Security-Auditing Jose Rodriguez 2022-09-22 23:11:00 -04:00
• 0c5445e1ee Updated Microsoft-Windows-PowerShell dictionaries Jose Rodriguez 2022-09-22 22:57:41 -04:00
• f9f3b5699c Updated PowerShell event logs Jose Rodriguez 2022-09-22 22:35:25 -04:00
• 8fd44a4101 Updated Windows Sysmon Events Jose Rodriguez 2022-09-22 21:45:10 -04:00
• 20514342b8 Merge pull request #45 from OTRF/developer Jose Rodriguez 2022-08-19 17:44:05 -04:00
• c0c074f41b Adding event samples Jose Rodriguez 2022-08-18 22:31:57 -04:00
• 6928026dbb Merge pull request #44 from SarguelUnda/developer Jose Rodriguez 2022-08-18 21:41:51 -04:00
• 3f9add5160 camel case standart name Swann Legras 2022-08-19 00:09:59 +02:00
• ec500fd23d Updated Security Auditing events Jose Rodriguez 2022-08-10 20:38:37 -04:00
• 48b64b839a Merge pull request #43 from OTRF/main Jose Rodriguez 2022-08-09 21:51:03 -04:00
• 59faf290f4 Merge pull request #42 from OTRF/developer Jose Rodriguez 2022-08-09 21:49:15 -04:00
• bcf3fbfd3b Updated and Added Data Dictionaries Jose Rodriguez 2022-08-09 21:47:24 -04:00
• e39a079df2 Merge pull request #41 from OTRF/main Jose Rodriguez 2022-08-05 07:55:23 -04:00
• e25891a59a Merge pull request #40 from OTRF/developer Jose Rodriguez 2022-08-05 07:54:11 -04:00
• 4757c8eb4d Update for Sysmon and Security dictionaries Jose Rodriguez 2022-08-05 07:44:21 -04:00
• 1030daed17 Windows Security Auditing Events: Added event samples Jose Rodriguez 2022-06-29 16:51:12 -04:00
• 80bb4f3d43 Windows Sysmon Events: Added new dictionary and event samples Jose Rodriguez 2022-06-29 15:54:22 -04:00
• fa77bd4049 Merge pull request #38 from OTRF/main Jose Rodriguez 2022-06-28 07:11:20 -04:00
• 43b20f0baf Revert "Adding XML event samples for Sysmon Windows" Jose Rodriguez 2022-06-28 07:07:37 -04:00
• 2ef1f9f68f Adding XML event samples for Sysmon Windows Jose Rodriguez 2022-06-28 07:03:16 -04:00
• 26f3037eb4 Adding XML event samples for Sysmon Windows Jose Rodriguez 2022-06-28 01:03:41 -04:00
• 3b828be81e Update for Microsoft Defender For Endpoint Dictionaries Jose Rodriguez 2022-06-24 11:41:12 -04:00
• 4cadd4d075 Merge pull request #36 from SarguelUnda/developer Jose Rodriguez 2022-05-06 10:13:59 -04:00
• e56a0abbfb Key change to be in line with OSSEM-DM * event_code --> event_id * title --> name Swann Legras 2022-05-03 01:01:34 +02:00
• 60e47a0a44 remove trailing \t Swann Legras 2022-05-03 00:04:20 +02:00
• afd9b27897 Update LICENSE to MIT Roberto Rodriguez 2022-02-26 22:12:07 -05:00
• 9b488f1445 Merge pull request #28 from frack113/zeek_x509 Roberto Rodriguez 2022-02-18 19:20:07 -08:00
• 382519b08b Merge pull request #30 from frack113/azure_yml Roberto Rodriguez 2021-11-14 15:37:23 -08:00
• 89d3f7ff45 Fix yml frack113 2021-11-14 18:44:39 +01:00
• a6c6b46d42 update field name from zeek site frack113 2021-11-14 08:19:57 +01:00
• b5acb70d83 Merge branch 'main' of https://github.com/OTRF/OSSEM-DD Roberto Rodriguez 2021-11-13 14:08:50 -05:00
• aa29b03300 Initial documentation of RPC Firewalls events Roberto Rodriguez 2021-11-13 14:08:30 -05:00
• a79f577f45 Update event-7.yml Jose Rodriguez 2021-11-04 19:21:07 -04:00
• 9b1efcb4dd Update event-6.yml Jose Rodriguez 2021-11-04 19:13:49 -04:00
• f575772d5e Update event-5.yml Jose Rodriguez 2021-11-04 19:10:36 -04:00
• 8a1a7824fb Update event-1.yml Jose Rodriguez 2021-11-03 11:36:37 -04:00
• 9837f875b0 Merge pull request #16 from nasbench/main Roberto Rodriguez 2021-11-01 18:17:27 -07:00
• 62117727dc Update osquery events to version 5.0.1 (Current Version) Nasreddine Bencherchali 2021-10-29 01:32:33 +01:00
• 01c780767a Update CarbonBlack EDR Events Nasreddine Bencherchali 2021-10-28 21:57:00 +01:00
• 1477642389 Merge pull request #15 from nasbench/main Roberto Rodriguez 2021-10-17 19:44:26 -07:00
• 99b12c07df Added New ETW Events (Windows 11) Nasreddine Bencherchali 2021-10-17 00:06:19 +01:00
• 23b42a5d71 Update sysmon_windows_linux_difference.py Jose Rodriguez 2021-10-15 13:39:34 -04:00
• 59f952c041 Merge pull request #14 from OTRF/feature/sysmon-for-linux Roberto Rodriguez 2021-10-15 09:26:53 -07:00
• 713052bb96 checked dictionary descriptions feature/sysmon-for-linux Roberto Rodriguez 2021-10-15 12:18:05 -04:00
• 40d8962858 Update event-11.yml Jose Rodriguez 2021-10-15 01:09:01 -04:00
• 12058a7c23 Updated Sysmon for Linux events Jose Rodriguez 2021-10-14 20:51:49 -04:00
• 8c3d336131 Merge pull request #12 from OTRF/azure Jose Rodriguez 2021-10-14 18:04:34 -04:00
• 097eef5c68 Merge pull request #13 from OTRF/feature/sysmon-for-linux Roberto Rodriguez 2021-10-14 10:21:57 -07:00
• c3e4384b58 sysmon for linux initial events Roberto Rodriguez 2021-10-14 13:21:18 -04:00
• b448051bb1 adding auditlogs schema azure Ashwin Patil 2021-08-11 03:33:03 -07:00
• c719daf7db managedidentiy signin logs schema Ashwin Patil 2021-08-04 08:46:49 -07:00
• 7c657d77e8 non interactive usersignin schema Ashwin Patil 2021-08-04 08:40:17 -07:00
• f821def3ee serviceprincipal schema Ashwin Patil 2021-08-04 08:21:03 -07:00
• 4d841af64f added signinlogs schema Ashwin Patil 2021-08-04 08:08:22 -07:00
• c2b64f69e0 Initial updated to Sysmon based on feedback Roberto Rodriguez 2021-05-02 10:01:59 -04:00
• 11c98b2b55 updated AWS dictionaries - structure Roberto Rodriguez 2021-05-01 15:22:22 -04:00
• b95084fd60 Merge pull request #8 from Cyb3rPandaH/main Jose Rodriguez 2021-04-04 01:56:29 -04:00
• a4a0f30c9e Readme file Image update Jose Rodriguez 2021-04-04 01:46:15 -04:00
• 8f49dc9e1d Merge pull request #7 from Cyb3rPandaH/main Jose Rodriguez 2021-04-04 01:33:55 -04:00
• bce4f2ee9d Modification of main readme file OSSEM-DD Jose Rodriguez 2021-04-04 01:32:41 -04:00
• 599c6c79c9 Merge pull request #6 from Cyb3rPandaH/main Jose Rodriguez 2021-04-03 23:54:40 -04:00
• 08e4cc811c Updating Readme File Jose Rodriguez 2021-04-03 23:49:10 -04:00
• 02f08c54ee OSSEM-DD Repository Structure Jose Rodriguez 2021-04-03 23:34:37 -04:00
• 0d80c1f82c Initial commit Jose Rodriguez 2021-04-03 16:47:26 -04:00