Roberto Rodriguez
fe7d3d46cb
update submodules
2022-02-26 22:50:33 -05:00
Roberto Rodriguez
82d2303520
Added CDM guideline to define source, target and destionation. Resolves #121 . Updated main Jupyterbook Config.
2022-02-26 22:46:04 -05:00
Roberto Rodriguez
14743658b0
Update LICENSE to MIT
...
License exists on OSSEM-DD, OSSEM-DM and OSSEM-CDM. Current one on all of them is GPLv3. We are updating the LICENSE to MIT in order to unlock additional collaboration opportunities with organizations that would like to help us improve the project.
2022-02-26 22:10:01 -05:00
Roberto Rodriguez
27ae7639b3
Update README.md
...
Cleaned main descriptions
Added sponsor logo
2022-01-06 22:26:00 -05:00
Roberto Rodriguez
b51d92412b
updated OSSEM-DD submodule and Sysmon for Linux events
2021-11-01 21:29:39 -04:00
Roberto Rodriguez
417b502d1c
upgraded jupyter books and Sysmon for Linux data dictionaries
2021-10-15 02:54:23 -04:00
Roberto Rodriguez
2344a6ed39
updated submodules
2021-10-14 21:27:43 -04:00
Roberto Rodriguez
3b4094eff2
Merge branch 'master' of https://github.com/OTRF/OSSEM
2021-10-14 21:15:18 -04:00
Roberto Rodriguez
76e01d56d3
updated linux config
2021-10-14 21:15:02 -04:00
Roberto Rodriguez
e9caaed72a
added sysmon schema
2021-10-14 21:10:43 -04:00
Jose Rodriguez
4620474325
Merge pull request #118 from KharcheNikhil/patch-1
...
Update intro.md
2021-09-08 18:26:21 -04:00
Jose Rodriguez
1848734013
attack_data_sources field in MD and XLSX to YAML scripts
...
python scripts md_to_yaml.py and xlsx_to_md.py were modified. I added the attack_data_sources metadata field.
To separate more than one data sources, use a comma(,)
2021-08-02 14:17:39 -07:00
Roberto Rodriguez
55bdbfaf85
updated sysmon configs and python script
2021-07-24 20:52:54 -04:00
Roberto Rodriguez
46970796d3
updated submodues
2021-06-24 18:02:35 -04:00
Roberto Rodriguez
521ea3ca53
updated docs
2021-06-24 17:50:54 -04:00
Jose Rodriguez
32f27f459b
Merge pull request #120 from Cyb3rPandaH/master
...
Adding Jupyter notebook for OSSEM blog
2021-06-24 16:53:23 -04:00
Cyb3rPandaH
1ab28836d4
Adding Jupyter notebook for OSSEM blog
...
Blog: OSSEm Data Dictionaries : Correlating Security Telemetry
2021-06-24 16:52:31 -04:00
nkharche
23e36e85dd
Update intro.md
2021-06-10 19:41:07 +05:30
Jose Rodriguez
89547de9e5
Merge pull request #117 from Cyb3rPandaH/master
...
xlsx to yaml parser and other updates
2021-06-09 16:05:02 -04:00
Cyb3rPandaH
f449dbab53
xlsx to yaml parser and other updates
...
- Creation of Script to parse MS Excel (.xlsx) files into yaml files: xlsx_to_yaml.py
- Updating of contributing_data_dictionaries.md: It contains .xlsx template.
2021-06-09 16:04:13 -04:00
Jose Rodriguez
d8b6f8e19f
Merge pull request #116 from Cyb3rPandaH/master
...
repository update
2021-06-09 11:18:05 -04:00
Cyb3rPandaH
f0a7f1d155
repository update
2021-06-09 11:16:00 -04:00
Jose Rodriguez
930816ebd0
Merge pull request #115 from Cyb3rPandaH/master
...
Markdown to Yaml Parser and other updates
2021-06-09 11:12:57 -04:00
Cyb3rPandaH
aad0b55b8e
Markdown to Yaml Parser and other updates
...
- Creation of Script to parse markdown into yaml files: md_to_yaml.py
- Creation of contributing_data_dictionaries.md: It contains markdown template.
- Updating authoring_data_dictionaries.md: Removed standard_type and Updated organization section.
2021-06-09 11:11:12 -04:00
Roberto Rodriguez
c8b1882f61
Update sysmonv14.1_4.70.xml
2021-05-25 17:25:16 -04:00
Roberto Rodriguez
f6b943da23
Sysmon update
2021-05-25 17:18:51 -04:00
Roberto Rodriguez
60f6877e86
Delete attack_techniques_to_events-checkpoint.ipynb
2021-05-19 20:17:10 -04:00
Roberto Rodriguez
650355dd7b
Updated OSSEM docs and submodules
2021-05-19 20:16:31 -04:00
Roberto Rodriguez
e72c0aace7
Update Dockerfile
2021-05-19 19:10:21 -04:00
Roberto Rodriguez
57f5edffc5
Update Dockerfile
2021-05-19 19:01:21 -04:00
Roberto Rodriguez
f3207a3cc5
Update attack_techniques_to_events.ipynb
2021-05-05 13:25:10 -04:00
Roberto Rodriguez
151b44a17d
Update attack_techniques_to_events.ipynb
2021-05-05 13:23:36 -04:00
Roberto Rodriguez
217d55a76a
Updating Docs
2021-05-05 12:52:02 -04:00
Jose Rodriguez
aa3351fa5f
Merge pull request #113 from Cyb3rPandaH/master
...
Updated Relationships and Jupyter Notebook
2021-05-04 01:08:11 -04:00
Jose Rodriguez
1000ba80d0
Updated Relationships and Jupyter Notebook
...
- Process modified Process
- Process executed Api Call
2021-05-04 01:06:02 -04:00
Roberto Rodriguez
83b3673309
Update attack_techniques_to_events.ipynb
2021-05-04 00:07:20 -04:00
Roberto Rodriguez
7cc5caf367
Update .gitmodules
2021-05-03 23:57:19 -04:00
Jose Rodriguez
03474d7d2f
Merge pull request #112 from Cyb3rPandaH/master
...
Updating attack technqiues to events notebook and readme file
2021-05-03 23:37:37 -04:00
Cyb3rPandaH
1984fbb54b
Updating readme file - main repository: ossem-dd link
2021-05-03 23:35:35 -04:00
Cyb3rPandaH
1cddd24a62
Updating readme file of the main repository
2021-05-03 23:32:55 -04:00
Cyb3rPandaH
48bc7c2a7c
Updating Intro readme file for docs/dm folder
2021-05-03 23:24:03 -04:00
Cyb3rPandaH
365ac533f2
Updating attack_techniques_to_events notebook
2021-05-03 23:20:25 -04:00
Roberto Rodriguez
c297114835
updating docs
2021-05-02 09:04:00 -04:00
Roberto Rodriguez
9a3985d54c
Updating Docs with submodules
...
+ created ossem creator script to parse content from OSSEM submodules
2021-05-01 21:18:18 -04:00
Roberto Rodriguez
2fdb0e1407
Merge pull request #111 from OTRF/AzureCloudDD
...
Azure cloud dd
2021-05-01 16:56:49 -04:00
Roberto Rodriguez
428866cc43
Merge branch 'master' of https://github.com/OTRF/OSSEM into AzureCloudDD
2021-05-01 16:55:17 -04:00
Roberto Rodriguez
561d939ece
Updated project structure
...
+ data dictionaries are already part of its own git submodule: https://github.com/OTRF/OSSEM-DD/tree/main
+ All YAML files in source folder are already part of its own sub-module
+ Removed source folder.
2021-05-01 16:54:23 -04:00
Roberto Rodriguez
22fd18a1c4
Merge pull request #109 from OTRF/AzureCloudDD
...
Sysmonc13.10 Schema and KQL Parser
2021-04-21 17:17:50 -04:00
Roberto Rodriguez
6a5cbc6324
Sysmonc13.10 Schema and KQL Parser
2021-04-21 17:14:12 -04:00
Roberto Rodriguez
4f8f59c883
Merge pull request #107 from OTRF/AzureCloudDD
...
Azure cloud dd
2021-04-03 16:59:20 -04:00