Commit Graph

  • 4a2b70aa5d Merge branch 'master' of https://github.com/OTRF/OSSEM master Roberto Rodriguez 2023-02-26 21:58:06 -05:00
  • 643c4d0ad9 Added Sysmon 14.14 Roberto Rodriguez 2023-02-26 21:57:48 -05:00
  • 241c0eff4e Merge pull request #125 from szabolevo/master Roberto Rodriguez 2022-09-29 00:51:42 -04:00
  • d648aa5a6e Updated Sysmon version 14.0 schema szabolevo 2022-09-28 22:08:18 -04:00
  • 18c6683072 Added Sysmon version 14.0 parser szabolevo 2022-09-28 22:07:24 -04:00
  • 9b1ae256e3 Added Sysmon version 14.0 schema Roberto Rodriguez 2022-08-18 23:56:35 -04:00
  • 3a9b913303 Merge pull request #124 from szabolevo/master Roberto Rodriguez 2022-07-31 21:12:36 -04:00
  • bd0eaa014e Updated schema/parser for Sysmon V13.34 szabolevo 2022-07-24 18:01:10 -04:00
  • fe7d3d46cb update submodules developer Roberto Rodriguez 2022-02-26 22:50:33 -05:00
  • 868a225f7e Update documentation gh-pages Roberto Rodriguez 2022-02-26 22:46:54 -05:00
  • 82d2303520 Added CDM guideline to define source, target and destionation. Resolves #121. Updated main Jupyterbook Config. Roberto Rodriguez 2022-02-26 22:46:04 -05:00
  • 14743658b0 Update LICENSE to MIT Roberto Rodriguez 2022-02-26 22:10:01 -05:00
  • 27ae7639b3 Update README.md Roberto Rodriguez 2022-01-06 22:26:00 -05:00
  • bc6fb6a940 Update documentation Roberto Rodriguez 2021-11-01 21:30:39 -04:00
  • b51d92412b updated OSSEM-DD submodule and Sysmon for Linux events Roberto Rodriguez 2021-11-01 21:29:39 -04:00
  • 03261aaddd Update documentation Roberto Rodriguez 2021-10-15 12:28:29 -04:00
  • bccf832c40 Update documentation Roberto Rodriguez 2021-10-15 12:24:11 -04:00
  • f9d6c8ab13 Update documentation Roberto Rodriguez 2021-10-15 02:56:25 -04:00
  • 417b502d1c upgraded jupyter books and Sysmon for Linux data dictionaries Roberto Rodriguez 2021-10-15 02:54:23 -04:00
  • 2344a6ed39 updated submodules Roberto Rodriguez 2021-10-14 21:27:43 -04:00
  • 3b4094eff2 Merge branch 'master' of https://github.com/OTRF/OSSEM Roberto Rodriguez 2021-10-14 21:15:18 -04:00
  • 76e01d56d3 updated linux config Roberto Rodriguez 2021-10-14 21:15:02 -04:00
  • e9caaed72a added sysmon schema Roberto Rodriguez 2021-10-14 21:10:43 -04:00
  • 4620474325 Merge pull request #118 from KharcheNikhil/patch-1 Jose Rodriguez 2021-09-08 18:26:21 -04:00
  • 1848734013 attack_data_sources field in MD and XLSX to YAML scripts Jose Rodriguez 2021-08-02 14:17:39 -07:00
  • 55bdbfaf85 updated sysmon configs and python script Roberto Rodriguez 2021-07-24 20:52:54 -04:00
  • 46970796d3 updated submodues Roberto Rodriguez 2021-06-24 18:02:35 -04:00
  • a12cda7d3d Update documentation Roberto Rodriguez 2021-06-24 17:59:21 -04:00
  • 521ea3ca53 updated docs Roberto Rodriguez 2021-06-24 17:50:54 -04:00
  • 32f27f459b Merge pull request #120 from Cyb3rPandaH/master Jose Rodriguez 2021-06-24 16:53:23 -04:00
  • 1ab28836d4 Adding Jupyter notebook for OSSEM blog Cyb3rPandaH 2021-06-24 16:52:31 -04:00
  • 23e36e85dd Update intro.md nkharche 2021-06-10 19:41:07 +05:30
  • 89547de9e5 Merge pull request #117 from Cyb3rPandaH/master Jose Rodriguez 2021-06-09 16:05:02 -04:00
  • f449dbab53 xlsx to yaml parser and other updates Cyb3rPandaH 2021-06-09 16:04:13 -04:00
  • d8b6f8e19f Merge pull request #116 from Cyb3rPandaH/master Jose Rodriguez 2021-06-09 11:18:05 -04:00
  • f0a7f1d155 repository update Cyb3rPandaH 2021-06-09 11:16:00 -04:00
  • 930816ebd0 Merge pull request #115 from Cyb3rPandaH/master Jose Rodriguez 2021-06-09 11:12:57 -04:00
  • aad0b55b8e Markdown to Yaml Parser and other updates Cyb3rPandaH 2021-06-09 11:11:12 -04:00
  • c8b1882f61 Update sysmonv14.1_4.70.xml Roberto Rodriguez 2021-05-25 17:25:16 -04:00
  • f6b943da23 Sysmon update Roberto Rodriguez 2021-05-25 17:18:51 -04:00
  • 1bbf8f4aba add 4679 windows event schema neu5ron 2021-05-25 17:09:21 -04:00
  • df9512893e fix double dash neu5ron 2021-05-25 17:08:26 -04:00
  • a2a0438d79 add http_cookie_header_variables neu5ron 2021-05-25 17:08:15 -04:00
  • 88f93008b7 add speculative_service neu5ron 2021-05-25 17:07:50 -04:00
  • c90743e7d7 add paloalto traffic. stage palo threat neu5ron 2021-05-25 17:07:35 -04:00
  • bbfe8a8417 updates neu5ron 2021-05-25 17:06:53 -04:00
  • 22fdbcedd5 updates neu5ron 2021-05-25 17:06:36 -04:00
  • a9ebd0408d add cookie fields and request body neu5ron 2021-05-25 17:05:22 -04:00
  • 08d31057f4 updates neu5ron 2021-05-25 17:04:59 -04:00
  • b5065f79c5 add etl_event_hash neu5ron 2021-05-25 17:01:14 -04:00
  • de2122336a Update documentation Roberto Rodriguez 2021-05-19 20:24:09 -04:00
  • 60f6877e86 Delete attack_techniques_to_events-checkpoint.ipynb Roberto Rodriguez 2021-05-19 20:17:10 -04:00
  • 650355dd7b Updated OSSEM docs and submodules Roberto Rodriguez 2021-05-19 20:16:31 -04:00
  • e72c0aace7 Update Dockerfile Roberto Rodriguez 2021-05-19 19:10:21 -04:00
  • 57f5edffc5 Update Dockerfile Roberto Rodriguez 2021-05-19 19:01:21 -04:00
  • f3207a3cc5 Update attack_techniques_to_events.ipynb Roberto Rodriguez 2021-05-05 13:25:10 -04:00
  • eed701651b Update documentation Roberto Rodriguez 2021-05-05 13:25:05 -04:00
  • 151b44a17d Update attack_techniques_to_events.ipynb Roberto Rodriguez 2021-05-05 13:23:36 -04:00
  • 1940132588 Update documentation Roberto Rodriguez 2021-05-05 13:22:59 -04:00
  • 91def7a172 Update documentation Roberto Rodriguez 2021-05-05 12:58:15 -04:00
  • 0d69056517 Update documentation Roberto Rodriguez 2021-05-05 12:55:22 -04:00
  • 217d55a76a Updating Docs Roberto Rodriguez 2021-05-05 12:52:02 -04:00
  • aa3351fa5f Merge pull request #113 from Cyb3rPandaH/master Jose Rodriguez 2021-05-04 01:08:11 -04:00
  • 1000ba80d0 Updated Relationships and Jupyter Notebook Jose Rodriguez 2021-05-04 01:06:02 -04:00
  • 83b3673309 Update attack_techniques_to_events.ipynb Roberto Rodriguez 2021-05-04 00:07:20 -04:00
  • a08903e85b Update documentation Roberto Rodriguez 2021-05-04 00:07:11 -04:00
  • 7cc5caf367 Update .gitmodules Roberto Rodriguez 2021-05-03 23:57:19 -04:00
  • 03474d7d2f Merge pull request #112 from Cyb3rPandaH/master Jose Rodriguez 2021-05-03 23:37:37 -04:00
  • 1984fbb54b Updating readme file - main repository: ossem-dd link Cyb3rPandaH 2021-05-03 23:35:35 -04:00
  • 1cddd24a62 Updating readme file of the main repository Cyb3rPandaH 2021-05-03 23:32:55 -04:00
  • 48bc7c2a7c Updating Intro readme file for docs/dm folder Cyb3rPandaH 2021-05-03 23:24:03 -04:00
  • 365ac533f2 Updating attack_techniques_to_events notebook Cyb3rPandaH 2021-05-03 23:20:25 -04:00
  • c297114835 updating docs Roberto Rodriguez 2021-05-02 09:04:00 -04:00
  • f49c1333c2 Update documentation Roberto Rodriguez 2021-05-01 21:36:38 -04:00
  • 9a3985d54c Updating Docs with submodules Roberto Rodriguez 2021-05-01 21:18:18 -04:00
  • 2fdb0e1407 Merge pull request #111 from OTRF/AzureCloudDD Roberto Rodriguez 2021-05-01 16:56:49 -04:00
  • 428866cc43 Merge branch 'master' of https://github.com/OTRF/OSSEM into AzureCloudDD Roberto Rodriguez 2021-05-01 16:55:17 -04:00
  • 561d939ece Updated project structure Roberto Rodriguez 2021-05-01 16:54:23 -04:00
  • 22fd18a1c4 Merge pull request #109 from OTRF/AzureCloudDD Roberto Rodriguez 2021-04-21 17:17:50 -04:00
  • 6a5cbc6324 Sysmonc13.10 Schema and KQL Parser Roberto Rodriguez 2021-04-21 17:14:12 -04:00
  • 4f8f59c883 Merge pull request #107 from OTRF/AzureCloudDD Roberto Rodriguez 2021-04-03 16:59:20 -04:00
  • 65e43095e1 Merge branch 'master' of https://github.com/OTRF/OSSEM into AzureCloudDD Roberto Rodriguez 2021-04-03 16:58:28 -04:00
  • f36374d58c Add OSSEM DD submodule Roberto Rodriguez 2021-04-03 16:55:12 -04:00
  • 36dadada61 Update .gitmodules Roberto Rodriguez 2021-04-03 16:49:04 -04:00
  • da1dacabf7 Merge pull request #100 from OTRF/AzureCloudDD Roberto Rodriguez 2021-02-24 10:26:13 -05:00
  • 790f672c50 Added support in KQL parser for Sysmon EID 15 Roberto Rodriguez 2021-02-23 18:18:10 -05:00
  • 93053281be Updated Sysmon KQL Parser and Jinja template to create it Roberto Rodriguez 2021-02-23 17:34:53 -05:00
  • 0e08dd44b0 Updated Sysmon config schema and KQL parser Roberto Rodriguez 2021-01-20 18:20:37 -05:00
  • d6fd0e1e47 Merge pull request #98 from HacknowledgeCH/cowrie-data-dictionaries Ricardo Dias 2021-01-17 16:13:56 +00:00
  • e40b62d786 Cowrie data dictionaries nicolasreich 2020-12-03 10:42:52 +01:00
  • 60e03bd43a Update OSSEM-DM Roberto Rodriguez 2020-11-30 21:44:38 -05:00
  • ad11f13796 Update documentation Roberto Rodriguez 2020-11-30 16:55:28 -05:00
  • 8adabda87d Updated docs from OSSEM DM Roberto Rodriguez 2020-11-30 16:55:16 -05:00
  • 170715acd4 Create sysmonv12.03_4.40.xml Roberto Rodriguez 2020-11-30 04:03:24 -05:00
  • 7981208bfd updated notebooks Roberto Rodriguez 2020-11-25 16:47:46 -05:00
  • 9a817c8cf1 Update documentation Roberto Rodriguez 2020-11-25 16:47:35 -05:00
  • 393150485b Updated Dockerfile and OSSEM DM notebook Roberto Rodriguez 2020-11-25 16:44:13 -05:00
  • 7ccfaffe60 Update documentation Roberto Rodriguez 2020-11-25 16:05:54 -05:00
  • 68547e1cbb Updated docs and OSSEM DM Roberto Rodriguez 2020-11-25 16:05:41 -05:00
  • 5b48563b9a Updated Data Model documentation Roberto Rodriguez 2020-11-19 02:28:49 -05:00