admin/hunters-forge-OSSEM
1
0
Fork 0
mirror of https://github.com/hunters-forge/OSSEM synced 2026-06-08 14:44:11 +00:00
Code Issues Packages Projects Releases Wiki Activity
386 Commits 8 Branches 0 Tags
dictionary_versioning
Commit Graph

56 Commits

Author SHA1 Message Date
Ricardo Dias 530d63ca6f updated sysmon data dictionary to schema 4.32 2020-08-23 21:57:18 +01:00
Ricardo Dias c1c08631af updated sysmon data dictionary to schema 4.32 2020-08-23 21:35:02 +01:00
Ricardo Dias 981c3e894d sysmon event yaml desc updated 2020-08-16 23:36:19 +01:00
Ricardo Dias 549d1c1a5a yaml fix 2020-08-16 23:25:19 +01:00
Ricardo Dias f71c8edc70 Added event_version to MDATP YAML 2020-08-16 23:12:20 +01:00
Ricardo Dias d37642bcd6 sync with master 2020-08-16 23:06:08 +01:00
svch0stz cd00f7dcfc Update and rename RegistryEvents.yml to DeviceRegistryEvents.yml 2020-08-09 23:00:27 +10:00
svch0stz 892fabb99d Update and rename ProcessCreationEvents.yml to DeviceProcessEvents.yml 2020-08-09 22:59:15 +10:00
svch0stz 61c528a935 Update and rename NetworkCommunicationEvents.yml to DeviceNetworkEvents.yml 2020-08-09 22:56:51 +10:00
svch0stz 5942bb4137 Update and rename MiscEvents.yml to DeviceEvents.yml 2020-08-09 22:49:19 +10:00
svch0stz 41a9177b7d Update and rename MachineNetworkInfo.yml to DeviceNetworkInfo.yml 2020-08-09 22:41:37 +10:00
svch0stz 178111fbee Update and rename LogonEvents.yml to DeviceLogonEvents.yml 2020-08-09 22:39:07 +10:00
svch0stz daeee94dca Update and rename ImageLoadEvents.yml to DeviceImageLoadEvents.yml 2020-08-09 22:35:40 +10:00
svch0stz 778894b483 Update and rename FileCreationEvents.yml to DeviceFileEvents.yml 2020-08-09 22:30:59 +10:00
svch0stz 106861736b Update and rename MachineInfo.yml to DeviceInfo.yml 2020-08-09 22:07:11 +10:00
svch0stz e074723651 Update and rename AlertEvents.yml to DeviceAlertEvents.yml 2020-08-09 21:56:09 +10:00
Ricardo Dias 1ad404a4cf added event_version 2020-07-16 15:12:51 +01:00
Ricardo Dias a02d842b21 aws yaml fix and versioning 2020-07-16 15:04:18 +01:00
Ricardo Dias 12864465a0 aws yaml fix 2020-07-15 18:07:05 +01:00
Roberto Rodriguez a7aab9a8d5 Updating Docs for dd and cdm 2020-07-13 10:30:59 -04:00
Ricardo Dias a46ca7b391 though deprecated, fixed CIM flows.yml 2020-06-21 09:10:59 +01:00
Dominik Lohmann 750b6754f6 Fix spelling in Sysmon Network Connection event 
The actual field name is `DestinationHostname`, not
`DestinationHostName`.
 2020-05-26 15:02:59 +02:00
Ricardo Dias 02e72305ca added event-23 2020-05-02 18:54:01 +01:00
Ricardo Dias 80612540b8 fix event-18 2020-05-02 17:19:04 +01:00
Ricardo Dias 52a4120ad1 fix event-17 2020-05-02 17:17:31 +01:00
Ricardo Dias 4802991ede fix event-15 2020-05-02 17:04:41 +01:00
Ricardo Dias 0410033f13 fix event-14 2020-05-02 17:02:15 +01:00
Ricardo Dias c9e154fd72 fix event-13 2020-05-02 17:00:04 +01:00
Ricardo Dias eb51e1a004 fix event-12 2020-05-02 16:01:46 +01:00
Ricardo Dias 1f2a0ff1c4 fix event-11 2020-05-02 16:00:14 +01:00
Ricardo Dias 26bbba1d7a fix event-10 2020-05-02 15:57:32 +01:00
Ricardo Dias 1c8a01ed74 fix event-9 2020-05-02 15:55:44 +01:00
Ricardo Dias 8875569ab0 fix event-8 2020-05-02 15:54:12 +01:00
Ricardo Dias 2340b522f2 fix event-7 2020-05-02 15:48:56 +01:00
Ricardo Dias dce0caa78c fix event-6 2020-05-02 15:45:57 +01:00
Ricardo Dias 41460118a7 fix event-5 2020-05-02 15:43:25 +01:00
Ricardo Dias 637fbf16bf fix event-3 2020-05-02 15:41:31 +01:00
Ricardo Dias 838e6b0432 fix event-2 2020-05-02 15:38:11 +01:00
Ricardo Dias 0b58442ad2 fix event-1 2020-05-02 15:33:36 +01:00
ashwin-patil c675cf480c adding ELB and route 53 datasources 2020-04-14 05:15:08 -07:00
ashwin-patil b3ded2e481 markdown formatting and yaml additions 2020-04-14 03:18:23 -07:00
Ricardo Dias d89e9e50bd fixed description of etw windows security auditing events 2020-02-22 11:26:28 +00:00
Ricardo Dias c3fe1af66e updated windows security auditing readme 2020-02-20 21:48:28 +00:00
Ricardo Dias ffff4aea57 improved readme files readability 2020-02-20 21:34:08 +00:00
Ricardo Dias 10daf66ccf removed whitespace from etw source folder, updated markdown 2020-02-20 16:54:17 +00:00
Ricardo Dias 556f6bbcfc removed windows securit events, as they are now undert etw-providers 2020-02-18 16:53:24 +00:00
Ricardo Dias 49e5239df2 powershell dictionary cleanup 2020-02-18 16:41:25 +00:00
Ricardo Dias 4f25ee35b1 merged existing windows security events into Microsoft-Windows-Security-Auditing 2020-02-18 16:07:13 +00:00
Ricardo Dias 84ded3ecea event code in etw are now strings. markdown updated. 2020-02-17 19:25:52 +00:00
Ricardo Dias 4291a8165b updated Microsoft-Windows-WMI-Activity event 2020-02-16 19:31:04 +00:00