417b502d1c
upgraded jupyter books and Sysmon for Linux data dictionaries
2021-10-15 02:54:23 -04:00
76e01d56d3
updated linux config
2021-10-14 21:15:02 -04:00
e9caaed72a
added sysmon schema
2021-10-14 21:10:43 -04:00
1848734013
attack_data_sources field in MD and XLSX to YAML scripts
...
python scripts md_to_yaml.py and xlsx_to_md.py were modified. I added the attack_data_sources metadata field.
To separate more than one data sources, use a comma(,)
2021-08-02 14:17:39 -07:00
55bdbfaf85
updated sysmon configs and python script
2021-07-24 20:52:54 -04:00
521ea3ca53
updated docs
2021-06-24 17:50:54 -04:00
f449dbab53
xlsx to yaml parser and other updates
...
- Creation of Script to parse MS Excel (.xlsx) files into yaml files: xlsx_to_yaml.py
- Updating of contributing_data_dictionaries.md: It contains .xlsx template.
2021-06-09 16:04:13 -04:00
930816ebd0
Merge pull request #115 from Cyb3rPandaH/master
...
Markdown to Yaml Parser and other updates
2021-06-09 11:12:57 -04:00
aad0b55b8e
Markdown to Yaml Parser and other updates
...
- Creation of Script to parse markdown into yaml files: md_to_yaml.py
- Creation of contributing_data_dictionaries.md: It contains markdown template.
- Updating authoring_data_dictionaries.md: Removed standard_type and Updated organization section.
2021-06-09 11:11:12 -04:00
c8b1882f61
Update sysmonv14.1_4.70.xml
2021-05-25 17:25:16 -04:00
f6b943da23
Sysmon update
2021-05-25 17:18:51 -04:00
c297114835
updating docs
2021-05-02 09:04:00 -04:00
9a3985d54c
Updating Docs with submodules
...
+ created ossem creator script to parse content from OSSEM submodules
2021-05-01 21:18:18 -04:00
561d939ece
Updated project structure
...
+ data dictionaries are already part of its own git submodule: https://github.com/OTRF/OSSEM-DD/tree/main
+ All YAML files in source folder are already part of its own sub-module
+ Removed source folder.
2021-05-01 16:54:23 -04:00
6a5cbc6324
Sysmonc13.10 Schema and KQL Parser
2021-04-21 17:14:12 -04:00
790f672c50
Added support in KQL parser for Sysmon EID 15
...
+ Hash field handled in KQL Sysmon parser and Jinja Template
2021-02-23 18:18:10 -05:00
93053281be
Updated Sysmon KQL Parser and Jinja template to create it
2021-02-23 17:34:53 -05:00
0e08dd44b0
Updated Sysmon config schema and KQL parser
...
Sysmon version 13.0.1
2021-01-20 18:20:37 -05:00
170715acd4
Create sysmonv12.03_4.40.xml
2020-11-30 04:03:24 -05:00
96ef5a3fc5
updated Sysmon Parser AZ Sentinel
2020-09-17 23:42:27 -04:00
17d6cf01d3
Create SysmonKQLParser.txt
2020-09-17 23:40:37 -04:00
86986889f5
Create sysmonv12_4.40.xml
2020-09-17 22:12:02 -04:00
bd35b76d41
Sysmon KQL Parser
2020-09-10 03:23:50 -04:00
a47073b4a9
Merge pull request #89 from hunters-forge/dictionary_versioning
...
Dictionary versioning
2020-08-25 12:54:02 -04:00
0059b6e8a9
updated docs
2020-08-19 13:35:42 -04:00
ffc16fc475
tempate update to display version in readmes
2020-08-17 14:04:15 +01:00
e59694cf03
template update to display dictionary version
2020-08-16 23:57:11 +01:00
56d50e3189
Create sysmonv11.11_4.32.xml
2020-08-11 01:37:38 -04:00
bde1774649
Updating Docs and scripts
2020-07-13 14:02:05 -04:00
6c9d383799
Merge pull request #86 from hunters-forge/improve_converter
...
Improve converter
2020-06-28 22:46:05 -07:00
790671cbd7
Docs - attack data sources start
2020-06-25 19:28:50 -04:00
5cafaa78eb
updated script and ds yaml files
2020-06-25 18:28:22 -04:00
638f39deab
update attadckdm
2020-06-25 14:28:10 -04:00
f7cd4c62ff
updated all ds file and script
2020-06-25 13:19:27 -04:00
86c92eaffc
Create sysmonv11.10_4.32.xml
2020-06-24 12:27:39 -04:00
18028e6f71
version bump
2020-06-21 09:56:52 +01:00
a0bd064ce0
ignore incomplete yaml entities
2020-06-21 09:53:44 +01:00
19bdd4135a
removed field name column
2020-06-21 08:48:00 +01:00
f4a4debbf7
removed unneeded modules
2020-06-21 08:27:57 +01:00
504127dfe6
deprecate code cleanup
2020-06-18 19:21:04 +01:00
899ea83df9
improved exception handling of invalid yaml
2020-06-18 19:05:13 +01:00
0431d6313b
sort of index readmes done by natsort
2020-06-18 19:01:38 +01:00
ec24c1d568
Updated sysmon schema
2020-04-28 16:50:40 -04:00
158daca821
Create sysmonv11.0.xml
2020-04-28 16:44:59 -04:00
ffff4aea57
improved readme files readability
2020-02-20 21:34:08 +00:00
88d2626ac6
markdown readme entries are now sorted
2020-02-20 17:06:22 +00:00
16098ae690
resources renamed to references
2020-02-08 23:07:06 +00:00
42305e65e3
minor readme fix
2020-02-08 13:23:00 +00:00
db7ee2ca8b
sysmon yml cleanup and minor readme template fixes
2020-02-08 13:02:21 +00:00
b707554821
fixed dd markdown template
2020-02-08 09:51:34 +00:00
Roberto Rodriguez