Commit Graph

469 Commits

Author SHA1 Message Date
Roberto Rodriguez fe7d3d46cb update submodules 2022-02-26 22:50:33 -05:00
Roberto Rodriguez 82d2303520 Added CDM guideline to define source, target and destionation. Resolves #121. Updated main Jupyterbook Config. 2022-02-26 22:46:04 -05:00
Roberto Rodriguez 14743658b0 Update LICENSE to MIT
License exists on OSSEM-DD, OSSEM-DM and OSSEM-CDM. Current one on all of them is GPLv3. We are updating the LICENSE to MIT in order to unlock additional collaboration opportunities with organizations that would like to help us improve the project.
2022-02-26 22:10:01 -05:00
Roberto Rodriguez 27ae7639b3 Update README.md
Cleaned main descriptions
Added sponsor logo
2022-01-06 22:26:00 -05:00
Roberto Rodriguez b51d92412b updated OSSEM-DD submodule and Sysmon for Linux events 2021-11-01 21:29:39 -04:00
Roberto Rodriguez 417b502d1c upgraded jupyter books and Sysmon for Linux data dictionaries 2021-10-15 02:54:23 -04:00
Roberto Rodriguez 2344a6ed39 updated submodules 2021-10-14 21:27:43 -04:00
Roberto Rodriguez 3b4094eff2 Merge branch 'master' of https://github.com/OTRF/OSSEM 2021-10-14 21:15:18 -04:00
Roberto Rodriguez 76e01d56d3 updated linux config 2021-10-14 21:15:02 -04:00
Roberto Rodriguez e9caaed72a added sysmon schema 2021-10-14 21:10:43 -04:00
Jose Rodriguez 4620474325 Merge pull request #118 from KharcheNikhil/patch-1
Update intro.md
2021-09-08 18:26:21 -04:00
Jose Rodriguez 1848734013 attack_data_sources field in MD and XLSX to YAML scripts
python scripts md_to_yaml.py and xlsx_to_md.py were modified. I added the attack_data_sources metadata field.

To separate more than one data sources, use a comma(,)
2021-08-02 14:17:39 -07:00
Roberto Rodriguez 55bdbfaf85 updated sysmon configs and python script 2021-07-24 20:52:54 -04:00
Roberto Rodriguez 46970796d3 updated submodues 2021-06-24 18:02:35 -04:00
Roberto Rodriguez 521ea3ca53 updated docs 2021-06-24 17:50:54 -04:00
Jose Rodriguez 32f27f459b Merge pull request #120 from Cyb3rPandaH/master
Adding Jupyter notebook for OSSEM blog
2021-06-24 16:53:23 -04:00
Cyb3rPandaH 1ab28836d4 Adding Jupyter notebook for OSSEM blog
Blog: OSSEm Data Dictionaries : Correlating Security Telemetry
2021-06-24 16:52:31 -04:00
nkharche 23e36e85dd Update intro.md 2021-06-10 19:41:07 +05:30
Jose Rodriguez 89547de9e5 Merge pull request #117 from Cyb3rPandaH/master
xlsx to yaml parser and other updates
2021-06-09 16:05:02 -04:00
Cyb3rPandaH f449dbab53 xlsx to yaml parser and other updates
- Creation of Script to parse MS Excel (.xlsx) files into yaml files: xlsx_to_yaml.py
- Updating of contributing_data_dictionaries.md: It contains .xlsx template.
2021-06-09 16:04:13 -04:00
Jose Rodriguez d8b6f8e19f Merge pull request #116 from Cyb3rPandaH/master
repository update
2021-06-09 11:18:05 -04:00
Cyb3rPandaH f0a7f1d155 repository update 2021-06-09 11:16:00 -04:00
Jose Rodriguez 930816ebd0 Merge pull request #115 from Cyb3rPandaH/master
Markdown to Yaml Parser and other updates
2021-06-09 11:12:57 -04:00
Cyb3rPandaH aad0b55b8e Markdown to Yaml Parser and other updates
- Creation of Script to parse markdown into yaml files: md_to_yaml.py
- Creation of contributing_data_dictionaries.md: It contains markdown template.
- Updating authoring_data_dictionaries.md: Removed standard_type and Updated organization section.
2021-06-09 11:11:12 -04:00
Roberto Rodriguez c8b1882f61 Update sysmonv14.1_4.70.xml 2021-05-25 17:25:16 -04:00
Roberto Rodriguez f6b943da23 Sysmon update 2021-05-25 17:18:51 -04:00
Roberto Rodriguez 60f6877e86 Delete attack_techniques_to_events-checkpoint.ipynb 2021-05-19 20:17:10 -04:00
Roberto Rodriguez 650355dd7b Updated OSSEM docs and submodules 2021-05-19 20:16:31 -04:00
Roberto Rodriguez e72c0aace7 Update Dockerfile 2021-05-19 19:10:21 -04:00
Roberto Rodriguez 57f5edffc5 Update Dockerfile 2021-05-19 19:01:21 -04:00
Roberto Rodriguez f3207a3cc5 Update attack_techniques_to_events.ipynb 2021-05-05 13:25:10 -04:00
Roberto Rodriguez 151b44a17d Update attack_techniques_to_events.ipynb 2021-05-05 13:23:36 -04:00
Roberto Rodriguez 217d55a76a Updating Docs 2021-05-05 12:52:02 -04:00
Jose Rodriguez aa3351fa5f Merge pull request #113 from Cyb3rPandaH/master
Updated Relationships and Jupyter Notebook
2021-05-04 01:08:11 -04:00
Jose Rodriguez 1000ba80d0 Updated Relationships and Jupyter Notebook
- Process modified Process
- Process executed Api Call
2021-05-04 01:06:02 -04:00
Roberto Rodriguez 83b3673309 Update attack_techniques_to_events.ipynb 2021-05-04 00:07:20 -04:00
Roberto Rodriguez 7cc5caf367 Update .gitmodules 2021-05-03 23:57:19 -04:00
Jose Rodriguez 03474d7d2f Merge pull request #112 from Cyb3rPandaH/master
Updating attack technqiues to events notebook and readme file
2021-05-03 23:37:37 -04:00
Cyb3rPandaH 1984fbb54b Updating readme file - main repository: ossem-dd link 2021-05-03 23:35:35 -04:00
Cyb3rPandaH 1cddd24a62 Updating readme file of the main repository 2021-05-03 23:32:55 -04:00
Cyb3rPandaH 48bc7c2a7c Updating Intro readme file for docs/dm folder 2021-05-03 23:24:03 -04:00
Cyb3rPandaH 365ac533f2 Updating attack_techniques_to_events notebook 2021-05-03 23:20:25 -04:00
Roberto Rodriguez c297114835 updating docs 2021-05-02 09:04:00 -04:00
Roberto Rodriguez 9a3985d54c Updating Docs with submodules
+ created ossem creator script to parse content from OSSEM submodules
2021-05-01 21:18:18 -04:00
Roberto Rodriguez 2fdb0e1407 Merge pull request #111 from OTRF/AzureCloudDD
Azure cloud dd
2021-05-01 16:56:49 -04:00
Roberto Rodriguez 428866cc43 Merge branch 'master' of https://github.com/OTRF/OSSEM into AzureCloudDD 2021-05-01 16:55:17 -04:00
Roberto Rodriguez 561d939ece Updated project structure
+ data dictionaries are already part of its own git submodule: https://github.com/OTRF/OSSEM-DD/tree/main
+ All YAML files in source folder are already part of its own sub-module
+ Removed source folder.
2021-05-01 16:54:23 -04:00
Roberto Rodriguez 22fd18a1c4 Merge pull request #109 from OTRF/AzureCloudDD
Sysmonc13.10 Schema and KQL Parser
2021-04-21 17:17:50 -04:00
Roberto Rodriguez 6a5cbc6324 Sysmonc13.10 Schema and KQL Parser 2021-04-21 17:14:12 -04:00
Roberto Rodriguez 4f8f59c883 Merge pull request #107 from OTRF/AzureCloudDD
Azure cloud dd
2021-04-03 16:59:20 -04:00