Commit Graph

34 Commits

Author SHA1 Message Date
Ricardo Dias 02e72305ca added event-23 2020-05-02 18:54:01 +01:00
Ricardo Dias 80612540b8 fix event-18 2020-05-02 17:19:04 +01:00
Ricardo Dias 52a4120ad1 fix event-17 2020-05-02 17:17:31 +01:00
Ricardo Dias 4802991ede fix event-15 2020-05-02 17:04:41 +01:00
Ricardo Dias 0410033f13 fix event-14 2020-05-02 17:02:15 +01:00
Ricardo Dias c9e154fd72 fix event-13 2020-05-02 17:00:04 +01:00
Ricardo Dias eb51e1a004 fix event-12 2020-05-02 16:01:46 +01:00
Ricardo Dias 1f2a0ff1c4 fix event-11 2020-05-02 16:00:14 +01:00
Ricardo Dias 26bbba1d7a fix event-10 2020-05-02 15:57:32 +01:00
Ricardo Dias 1c8a01ed74 fix event-9 2020-05-02 15:55:44 +01:00
Ricardo Dias 8875569ab0 fix event-8 2020-05-02 15:54:12 +01:00
Ricardo Dias 2340b522f2 fix event-7 2020-05-02 15:48:56 +01:00
Ricardo Dias dce0caa78c fix event-6 2020-05-02 15:45:57 +01:00
Ricardo Dias 41460118a7 fix event-5 2020-05-02 15:43:25 +01:00
Ricardo Dias 637fbf16bf fix event-3 2020-05-02 15:41:31 +01:00
Ricardo Dias 838e6b0432 fix event-2 2020-05-02 15:38:11 +01:00
Ricardo Dias 0b58442ad2 fix event-1 2020-05-02 15:33:36 +01:00
ashwin-patil c675cf480c adding ELB and route 53 datasources 2020-04-14 05:15:08 -07:00
ashwin-patil b3ded2e481 markdown formatting and yaml additions 2020-04-14 03:18:23 -07:00
Ricardo Dias d89e9e50bd fixed description of etw windows security auditing events 2020-02-22 11:26:28 +00:00
Ricardo Dias c3fe1af66e updated windows security auditing readme 2020-02-20 21:48:28 +00:00
Ricardo Dias ffff4aea57 improved readme files readability 2020-02-20 21:34:08 +00:00
Ricardo Dias 10daf66ccf removed whitespace from etw source folder, updated markdown 2020-02-20 16:54:17 +00:00
Ricardo Dias 556f6bbcfc removed windows securit events, as they are now undert etw-providers 2020-02-18 16:53:24 +00:00
Ricardo Dias 49e5239df2 powershell dictionary cleanup 2020-02-18 16:41:25 +00:00
Ricardo Dias 4f25ee35b1 merged existing windows security events into Microsoft-Windows-Security-Auditing 2020-02-18 16:07:13 +00:00
Ricardo Dias 84ded3ecea event code in etw are now strings. markdown updated. 2020-02-17 19:25:52 +00:00
Ricardo Dias 4291a8165b updated Microsoft-Windows-WMI-Activity event 2020-02-16 19:31:04 +00:00
Ricardo Dias 1b0994bd57 fixed osquery typo 2020-02-09 21:16:03 +00:00
Ricardo Dias 2d22b25cdc added osquery 4.1.2 schema 2020-02-09 21:05:28 +00:00
Ricardo Dias 16803f4a15 applied latest schema branch changes 2020-02-09 15:15:17 +00:00
Ricardo Dias 7f3adb1508 resources renamed to references 2020-02-08 23:11:32 +00:00
Ricardo Dias db7ee2ca8b sysmon yml cleanup and minor readme template fixes 2020-02-08 13:02:21 +00:00
Ricardo Dias 2148e2a686 yaml proof of concept 2020-02-07 18:10:32 +00:00