admin/OTRF-OSSEM-DM
1
0
Fork 0
mirror of https://github.com/OTRF/OSSEM-DM synced 2026-06-08 12:05:55 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
developer
OTRF-OSSEM-DM/relationships
T
History
Jose Rodriguez b24952b4e0 Updated ossemDM.py script 
- added field channel to yml, json, and csv files
- updated all_ossem_relationships and attack files
2022-09-22 13:47:45 -04:00
..
_all_ossem_relationships.json
Updated ossemDM.py script
2022-09-22 13:47:45 -04:00
_all_ossem_relationships.yml
Updated ossemDM.py script
2022-09-22 13:47:45 -04:00
application_attempted_to_authenticate_user.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
application_domain_started.yml
General update on relationships
2022-09-22 13:07:27 -04:00
application_host_started.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_connection_from_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_connection_from_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_connection_from_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_connection_to_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_connection_to_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_connection_to_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_listener_on_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_listener_on_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_listener_on_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_port_bind_on_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_port_bind_on_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_blocked_port_bind_on_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_permitted_listener_on_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_permitted_listener_on_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_permitted_listener_on_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_permitted_port_bind_on_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_permitted_port_bind_on_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
device_permitted_port_bind_on_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
driver_loaded.yml
General update on relationships
2022-09-22 13:07:27 -04:00
firewall_attempted_to_load_configuration.yml
General update on relationships
2022-09-22 13:07:27 -04:00
firewall_disabled.yml
General update on relationships
2022-09-22 13:07:27 -04:00
firewall_enabled.yml
General update on relationships
2022-09-22 13:07:27 -04:00
firewall_rule_added.yml
General update on relationships
2022-09-22 13:07:27 -04:00
firewall_rule_modified.yml
General update on relationships
2022-09-22 13:07:27 -04:00
firewall_rule_removed.yml
General update on relationships
2022-09-22 13:07:27 -04:00
logon_metadata.yml
General update on relationships
2022-09-22 13:07:27 -04:00
logon_modified.yml
General update on relationships
2022-09-22 13:07:27 -04:00
logon_process_trusted.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_accessed_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_accessed_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_accessed_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_added_firewall_rule.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_attempted_connection_from_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_attempted_connection_from_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_attempted_connection_to_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_attempted_connection_to_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_attempted_to_bind_on_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_attempted_to_listen_on_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_bound_to_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_connected_from_host.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_connected_from_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_connected_from_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_connected_to_host.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_connected_to_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_connected_to_pipe.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_connected_to_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_created_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_created_pipe.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_created_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_created_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_created_thread.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_deleted_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_deleted_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_executed_api_call.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_executed_command.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_executed_dns_query.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_executed_script.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_listened_on_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_loaded_module.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_modified_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_modified_firewall_rule.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_modified_firewall.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_modified_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_modified_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_removed_firewall_rule.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_requested_access_to_ad_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_requested_access_to_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_requested_access_to_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_requested_access_to_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_searched_ldap.yml
General update on relationships
2022-09-22 13:07:27 -04:00
process_terminated.yml
General update on relationships
2022-09-22 13:07:27 -04:00
sensor_health_changed.yml
General update on relationships
2022-09-22 13:07:27 -04:00
service_started.yml
General update on relationships
2022-09-22 13:07:27 -04:00
service_stopped.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_accessed_ad_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_accessed_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_accessed_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_accessed_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_added_firewall_rule_from_ip.yml
fixing missing '-'
2022-08-10 13:29:02 -04:00
user_added_firewall_rule.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_access_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_access_network_share.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_authenticate_from_device.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_authenticate_from_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_authenticate_from_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_authenticate_to_application.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_attempted_to_authenticate_to_device.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_disable_drive.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_enable_drive.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_install_drive.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_log_off_from_device.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_attempted_to_modify_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_authenticated_from_device.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_authenticated_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_connected_from_device.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_connected_from_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_connected_from_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_connected_to_device.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_connected_to_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_connected_to_pipe.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_connected_to_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_ad_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_group.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_instance_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_created_instance.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_created_logon_from_ip.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_logon_from_port.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_logon.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_network_share.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_pipe.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_scheduled_job.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_service.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_created_wmi_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_ad_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_group.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_network_share.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_scheduled_job.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_deleted_wmi_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_disabled_drive.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_disabled_scheduled_job.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_disabled_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_enabled_drive.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_enabled_scheduled_job.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_enabled_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_enumerated_group.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_executed_command.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_granted_acess_to_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_installed_drive.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_listed_firewall_rule_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_listed_firewall_rule.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_loaded_module.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_locked_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_ad_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_cloud_service_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_modified_cloud_service.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_modified_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_firewall_rule_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_modified_firewall_rule.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_firewall.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_group.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_instance_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_modified_instance.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_modified_network_share.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_scheduled_job.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_modified.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_removed_acess_from_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_removed_firewall_rule_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_removed_firewall_rule.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_requested_access_to_ad_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_requested_access_to_file.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_requested_access_to_registry.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_requested_access_to_service.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_requested_ad_credential.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_restored_ad_object.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_retrieved_information_about_cloud_service_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_retrieved_information_about_cloud_service.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_retrieved_information_about_firewall_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_retrieved_information_about_firewall_rule_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_retrieved_information_about_firewall_rule.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_retrieved_information_about_firewall.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_started_application_host.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_started_cloud_service_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_started_cloud_service.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_stopped_cloud_service_from_ip.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_stopped_cloud_service.yml
attack data source name to lower case in all relationships
2022-06-28 12:06:08 -04:00
user_terminated_logon.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_terminated_process.yml
General update on relationships
2022-09-22 13:07:27 -04:00
user_unlocked_user.yml
General update on relationships
2022-09-22 13:07:27 -04:00
wmi_object_created.yml
General update on relationships
2022-09-22 13:07:27 -04:00