admin/OTRF-OSSEM-DM
1
0
Fork 0
mirror of https://github.com/OTRF/OSSEM-DM synced 2026-06-08 12:05:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 9f9373d86a Merge pull request #58 from Kyrasuum/main main Jose Rodriguez 2022-10-11 09:56:06 -04:00
  • 395b86f351 Removing typo where references had a double dash Phillip Lorentz 2022-09-26 09:04:56 -04:00
  • be4ce55239 Merge pull request #57 from OTRF/developer developer Jose Rodriguez 2022-09-24 19:06:05 -04:00
  • f946a6f52e Updated and Run ossemDM.py Jose Rodriguez 2022-09-22 19:09:15 -04:00
  • a5a8d235f8 Update README.md Jose Rodriguez 2022-09-22 18:54:28 -04:00
  • 96c7f727c7 Update ossemDM.py Jose Rodriguez 2022-09-22 13:48:17 -04:00
  • b24952b4e0 Updated ossemDM.py script Jose Rodriguez 2022-09-22 13:47:45 -04:00
  • ed1cbddce4 General update on relationships Jose Rodriguez 2022-09-22 13:07:27 -04:00
  • ede280ad4d Updated EventLog relationships Jose Rodriguez 2022-09-22 12:22:19 -04:00
  • 9ec27e0e41 Updated Windows Service Control Manager relationships Jose Rodriguez 2022-09-22 12:01:45 -04:00
  • 3a47d0c216 Updated Windows Firewall With Advanced Security relationships Jose Rodriguez 2022-09-22 11:44:30 -04:00
  • c67bcceefc Updated PowerShell Event Jose Rodriguez 2022-09-22 10:20:13 -04:00
  • c9dccda43e Updated Windows Security Auditing Relationships Jose Rodriguez 2022-09-21 23:40:42 -04:00
  • cf5bd31ca3 Updated Windows Sysmon Relationships Jose Rodriguez 2022-09-20 10:15:35 -04:00
  • 7e2d86a6ec Update README.md Jose Rodriguez 2022-09-20 09:16:25 -04:00
  • 7e96dacdbf Updated of README file Jose Rodriguez 2022-09-20 09:14:02 -04:00
  • 0576cd1f92 Merge pull request #56 from OTRF/developer Jose Rodriguez 2022-09-20 00:59:54 -04:00
  • 96ce340021 Merge pull request #54 from Kyrasuum/main Jose Rodriguez 2022-08-18 21:51:52 -04:00
  • 40c06b01bb Added missing space Phillip Lorentz 2022-08-10 13:53:16 -04:00
  • 2394565bb8 fixing missing '-' Phillip Lorentz 2022-08-10 13:29:02 -04:00
  • e503bc29f0 Merge pull request #53 from OTRF/main Jose Rodriguez 2022-08-05 09:57:00 -04:00
  • 0e3d40d8ad Merge pull request #52 from OTRF/developer Jose Rodriguez 2022-08-05 09:56:08 -04:00
  • c7f3a2ad9d Aligning source and target entities with OSSEM-CDM Jose Rodriguez 2022-08-05 09:42:40 -04:00
  • e2c9f58d10 attack data source name to lower case in all relationships Jose Rodriguez 2022-06-28 12:06:08 -04:00
  • 3759ceaff9 Updated schema and attack mapping for Windows Firewall With Advanced Security events Jose Rodriguez 2022-06-28 08:51:31 -04:00
  • a1ee4c7615 Updated schema for Powershell events Jose Rodriguez 2022-06-28 07:54:05 -04:00
  • 8f53d4dbdd Update Schema to align with DD & Update of ossemDM script Jose Rodriguez 2022-06-27 23:05:28 -04:00
  • 0251be6fc9 Merge branch 'pr/43' into developer Jose Rodriguez 2022-06-27 18:40:01 -04:00
  • 8b7229f133 Merge branch 'main' into developer Jose Rodriguez 2022-06-26 12:31:11 -04:00
  • f63734851c Update of Schema for Microsoft Defender for Endpoint event logs Jose Rodriguez 2022-06-24 11:51:22 -04:00
  • e25862cb22 Merge pull request #50 from Kyrasuum/main Roberto Rodriguez 2022-05-14 14:45:29 -07:00
  • b665947ace Delete techniques_to_events_mapping.yaml Roberto Rodriguez 2022-05-14 14:44:59 -07:00
  • 18dda0771e Updated AWS, Sysmon and Security relationships: log_provider & log_source Jose Rodriguez 2022-05-03 13:41:43 -04:00
  • ed5982b0f2 Updated All Sysmon Relations (Provider/Source) Jose Rodriguez 2022-05-03 10:51:49 -04:00
  • f7801a3429 Updated AWS security events in relationships Jose Rodriguez 2022-05-02 18:32:48 -04:00
  • c0c9cf47e2 Adding Event_Version field to security events Part 2 of 2 Jose Rodriguez 2022-04-29 23:22:23 -04:00
  • 3af9307bed Adding Event_Version field to security events Part 1 of 2 Jose Rodriguez 2022-04-28 13:01:16 -04:00
  • 555ae4532c Fixed some typos which made processing by golang json/yaml loaders impossible Phillip Lorentz 2022-03-16 16:12:15 -04:00
  • e3477a1c18 ossemDM.py adds relationship ids Jose Rodriguez 2022-03-14 18:09:16 -04:00
  • 4a62e7c170 Updated ossemDM.py to generate json file with all OSSEM relationships Jose Rodriguez 2022-03-12 15:50:18 -05:00
  • b47d0c8eae Merge pull request #46 from H1L021/main Jose Rodriguez 2022-03-12 15:35:14 -05:00
  • 0ad533ea17 Merge pull request #45 from olafhartong/main Jose Rodriguez 2022-03-12 14:59:50 -05:00
  • fa839a6a18 Create generate_uuid.py Cyb3rSn0rlax 2022-03-11 18:23:04 +01:00
  • 5ba00a4367 Create logon_process_trusted.yml Cyb3rSn0rlax 2022-03-11 18:20:57 +01:00
  • a645750b1b rebrand MDE and add proper channel and event data Olaf Hartong 2022-03-09 08:37:52 +01:00
  • 827c550c52 Created script adding_uuid.py Jose Rodriguez 2022-03-08 02:36:57 -05:00
  • aaa4258a40 Updated ossemDM.py and created adding_uuid.py Jose Rodriguez 2022-03-08 02:36:12 -05:00
  • 1d109d3958 Updated Files based on PR #38 Jose Rodriguez 2022-03-07 22:01:11 -05:00
  • 649f2a2655 Merge pull request #38 from rubinatorz/win_events Jose Rodriguez 2022-03-07 00:12:05 -05:00
  • a453ae9836 Merge pull request #41 from H1L021/main Roberto Rodriguez 2022-03-01 08:25:57 -08:00
  • 0c37ba4ffc Added MS Defender for Endpoint Cyb3rSn0rlax 2022-03-01 17:24:29 +01:00
  • e6c6d3cbba Update process_searched_ldap.yml Cyb3rSn0rlax 2022-03-01 17:07:39 +01:00
  • ce1f77a76e Create process_searched_ldap.yml Cyb3rSn0rlax 2022-03-01 17:02:23 +01:00
  • 0340428880 Update LICENSE to MIT Roberto Rodriguez 2022-02-26 22:16:02 -05:00
  • 7378cf86f7 reusing same syntax as in ossem dd Swann Legras 2022-02-08 19:16:47 +01:00
  • 5a647c8982 Update process_deleted_file.yml Jose Rodriguez 2021-11-25 02:03:03 -05:00
  • 989281c16c Update process_created_pipe.yml Jose Rodriguez 2021-11-25 02:00:28 -05:00
  • 41a9875d26 Update user_created_file.yml Jose Rodriguez 2021-11-17 12:35:42 -05:00
  • cf2339b74d Contribution of Windows events. Also included some small fixes. rubinatorz 2021-11-17 16:12:37 +01:00
  • 0e9e21d3d8 Sysmon (User) Relationships Jose Rodriguez 2021-11-11 08:56:46 -05:00
  • d41fa2f66a Removed Firewall / Firewall Enable from use-cases Jose Rodriguez 2021-11-10 10:45:56 -05:00
  • 65b5974378 updated relationships with Sysmon for Linux and updated use cases files Roberto Rodriguez 2021-10-18 16:05:53 -04:00
  • 29d5df0406 Relationships Update Jose Rodriguez 2021-08-03 18:04:03 -07:00
  • b67d2d8adc Merge pull request #34 from olafhartong/main Jose Rodriguez 2021-08-02 17:59:14 -07:00
  • 782ffe3eed Update wmi_object_created.yml Jose Rodriguez 2021-08-02 17:47:38 -07:00
  • 93693d24b1 Update user_terminated_process.yml Jose Rodriguez 2021-08-02 17:40:30 -07:00
  • 640d02eb38 Update user_loaded_module.yml Jose Rodriguez 2021-08-02 17:37:45 -07:00
  • 94aa292741 Update user_created_windows_registry_key_value.yml Jose Rodriguez 2021-08-02 17:32:03 -07:00
  • da54fd546a Update user_created_windows_registry_key.yml Jose Rodriguez 2021-08-02 17:29:22 -07:00
  • 9ba5dbb399 regenerated after adding MDE and Sysmon Olaf Hartong 2021-06-28 13:46:58 +02:00
  • 351d7ab792 added tons of defender for endpoint and some sysmon events Olaf Hartong 2021-06-28 13:44:29 +02:00
  • f3745ab58a Merge pull request #33 from Cyb3rPandaH/main Jose Rodriguez 2021-06-24 20:31:38 -04:00
  • 7abf117c00 Updating ossemDM_XPath_Queries.ps1 Cyb3rPandaH 2021-06-24 20:30:56 -04:00
  • 44b6d0895c added PS script to create xpath queries Roberto Rodriguez 2021-06-24 17:37:34 -04:00
  • 470027d3c3 Merge pull request #32 from Cyb3rPandaH/main Jose Rodriguez 2021-06-24 15:46:39 -04:00
  • f569cd01bb Adding PowerShell Scripts Cyb3rPandaH 2021-06-24 15:45:54 -04:00
  • 5dbcb5d989 Merge pull request #31 from Cyb3rPandaH/main Jose Rodriguez 2021-06-23 21:40:31 -04:00
  • c92d207ded Updated ossemDM.py to add filter_in data field Cyb3rPandaH 2021-06-23 21:39:54 -04:00
  • 78bf5bc9ee Merge pull request #29 from Cyb3rPandaH/main Jose Rodriguez 2021-06-23 12:18:07 -04:00
  • 41c16dd8fb Updated user_requested_access_to_file relationship Cyb3rPandaH 2021-06-23 12:17:24 -04:00
  • c70a7b738f Merge pull request #28 from Cyb3rPandaH/main Jose Rodriguez 2021-06-20 01:00:27 -04:00
  • a757f16e17 files update Cyb3rPandaH 2021-06-20 00:58:46 -04:00
  • 8b035b6e27 Merge pull request #27 from Cyb3rPandaH/main Jose Rodriguez 2021-06-18 13:09:27 -04:00
  • f073e55da5 Removed/Updated/Added relationships Cyb3rPandaH 2021-06-18 13:08:11 -04:00
  • edd31c39ff Merge pull request #24 from reidgilman/main Jose Rodriguez 2021-06-18 03:03:25 -04:00
  • 4a2987eee3 Update user_requested_ad_credential.yml Jose Rodriguez 2021-06-18 02:44:44 -04:00
  • 9b3b835d36 Update user_attempted_to_authenticate_to_computer.yml Jose Rodriguez 2021-06-18 02:40:03 -04:00
  • d8bbba8c0d Update user_accessed_windows_registry_key.yml Jose Rodriguez 2021-06-18 02:32:48 -04:00
  • dbafd2a57b Update user_accessed_ad_object.yml Jose Rodriguez 2021-06-18 02:23:55 -04:00
  • fbf4646a9d Update user_access_file.yml Jose Rodriguez 2021-06-18 02:11:52 -04:00
  • 36e36bd043 Update user_access_file.yml Jose Rodriguez 2021-06-18 02:11:25 -04:00
  • 13c2c75e04 Delete process_loaded_driver.yml Jose Rodriguez 2021-06-18 02:09:48 -04:00
  • 09a9ee4309 Update process_accessed_windows_registry_key.yml Jose Rodriguez 2021-06-18 01:41:22 -04:00
  • e07f3a9339 Update process_accessed_file.yml Jose Rodriguez 2021-06-18 01:23:06 -04:00
  • a199ae34da Updated scheduled jobs data source relationships Roberto Rodriguez 2021-06-15 22:26:02 -04:00
  • dc137db660 Updated scheduled job Roberto Rodriguez 2021-06-15 21:57:36 -04:00
  • e3b9cdabf9 Scheduled Jobs Roberto Rodriguez 2021-06-15 20:37:48 -04:00
  • 607a06e222 Merge pull request #25 from OTRF/feature/add-xpath-queries Roberto Rodriguez 2021-06-14 17:12:18 -04:00
  • f3556abb1b Added JSON ATTACK Mappings Roberto Rodriguez 2021-06-14 17:11:03 -04:00
  • 7c0d72d903 added several user & process relationships Reid Gilman 2021-06-04 12:04:57 -04:00