Commit Graph

Select branches

Hide Pull Requests

c-prot-macos-telemetry-consolidated

c-prot-win-macos

c-prot-windows-telemetry-consolidated

copilot/update-vendor-name-formatting

cprot-edr

cs-lnx-updates

elastic-defend-macos-corrections

inodee-patch-1

main

sophos-edr-updates

uptycs-macos-telemetry-consolidated

#10

#10

#100

#103

#105

#107

#108

#11

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#120

#121

#123

#124

#126

#127

#128

#129

#130

#131

#132

#133

#133

#134

#134

#135

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#160

#161

#162

#163

#164

#165

#166

#167

#17

#171

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#196

#197

#198

#198

#199

#199

#2

#20

#200

#200

#24

#29

#30

#31

#32

#33

#36

#37

#39

#39

#40

#41

#42

#43

#46

#47

#48

#5

#51

#52

#54

#56

#57

#57

#58

#60

#60

#61

#62

#65

#66

#67

#68

#71

#72

#73

#78

#80

#82

#83

#84

#87

#9

#95

#96

#97

#99

0.2

v0.1

v0.3

Mono Color

• 47b5a98340 Uptycs macOS telemetry updates (#197) main Kostas 2026-05-17 13:54:36 -07:00
• 7ecaa79978 Update Uptycs macOS evidence statuses uptycs-macos-telemetry-consolidated tsale 2026-05-17 13:51:29 -07:00
• 4e92f79c2f C-Prot macOS telemetry updates (#195) Kostas 2026-05-14 11:22:06 -07:00
• 3cc1296d3b fix: adjust C-Prot macOS telemetry statuses c-prot-macos-telemetry-consolidated tsale 2026-05-14 11:17:40 -07:00
• 3afe8902f5 Initial Coverage for Cortex XDR Agent on Linux (#148) Bertrand Le Bail 2026-05-14 01:12:25 +02:00
• 77c2ded5ab Update Uptycs macOS telemetry coverage Hermes Agent 2026-05-13 12:14:54 -07:00
• 73d68a742f Update C-Prot Windows telemetry coverage c-prot-windows-telemetry-consolidated Hermes Agent 2026-05-13 11:54:52 -07:00
• d615707e4c Update C-Prot macOS telemetry coverage Hermes Agent 2026-05-13 11:54:52 -07:00
• 56de511ddc Update Elastic Defend macOS telemetry — 6 corrections (#167) Colson Wilhoit 2026-04-28 02:43:39 -05:00
• 7c3a0c87b1 Remove unsupported Elastic telemetry scores on macOS elastic-defend-macos-corrections Kostas 2026-04-28 00:42:03 -07:00
• 316e328502 Trigger database updater verification run Kostas 2026-04-28 00:05:07 -07:00
• fa229135a9 Trigger database update workflow for updater changes Kostas 2026-04-27 23:50:17 -07:00
• 7a27eb7faa Harden database update success checks Kostas 2026-04-27 23:43:44 -07:00
• 712ab2ffac Harden database update success checks c-prot-win-macos Kostas 2026-04-27 23:43:44 -07:00
• 053bb72199 Add C-Prot Windows and macOS telemetry results (#180) Kostas 2026-04-27 23:23:44 -07:00
• f021741e29 Correcting Agent Protection Disabled Kostas 2026-04-27 23:22:51 -07:00
• c585367322 Fix CSV-JSON status translation in convert.py Kostas 2026-04-27 23:17:15 -07:00
• 26e724a8e8 Refactor code structure for improved readability and maintainability tsale 2026-04-24 12:45:38 -07:00
• abf07a8325 Fix Atomic Red Team path resolution in telemetry generator v0.3 tsale 2026-04-21 17:58:52 -07:00
• a47ed41e6b Update Elastic Defend macOS telemetry — 6 corrections Colson Wilhoit 2026-03-30 10:54:26 -05:00
• 63ce215c68 Merge pull request #150 from oliviagallucci:oliviagallucci-macos-edr-telem Kostas 2026-03-25 22:19:58 -07:00
• 83aa106dc7 Add Linux support to EDR Telemetry Cloud Function and update dependencies tsale 2026-03-25 22:05:19 -07:00
• 6ff355716a Merge branch 'main' into oliviagallucci-macos-edr-telem Kostas 2026-03-25 17:07:26 -07:00
• 0fdd22811c Refactor macOS telemetry data and update investigation report tsale 2026-03-25 16:52:58 -07:00
• b1965910b7 Update EDR_telem_linux.json - Uptycs - User Account (#165) Josh Lemon 2026-03-24 12:22:06 +11:00
• 495ba50dd4 Grammer Update for "BITS Jobs" (#164) Josh Lemon 2026-03-24 12:21:11 +11:00
• 5491d2509a Update EDR_telem_windows.json - Uptycs BIT Jobs (#163) Josh Lemon 2026-03-24 12:20:30 +11:00
• a4cc2fecaf Update EDR_telem_linux.json - Uptycs - Image Load (#162) Josh Lemon 2026-03-24 12:18:35 +11:00
• 19d8660a0b C-Prot Linux Script Activity (#161) Hüsnü Öner 2026-03-24 04:16:55 +03:00
• edfdf64a9b C-Prot Linux Driver Module Activity (#160) Hüsnü Öner 2026-03-24 04:14:50 +03:00
• 6c57dbfcb8 C-Prot Linux User Account Management (#159) Hüsnü Öner 2026-03-24 04:12:39 +03:00
• f7cf810ef5 Update EDR_telem_linux.json (#158) Hüsnü Öner 2026-03-24 04:09:08 +03:00
• b3e969ea89 ESET USB Mount/Unmount (#157) Ján Trenčanský 2026-03-24 02:07:46 +01:00
• c65a1fb3f9 Update EDR_telem_windows.json - Agent Install + Keep Alive (#156) Josh Lemon 2026-03-24 12:00:44 +11:00
• 69c640ef6d Update EDR_telem_windows.json - Uptycs Scheduled Task (#155) Josh Lemon 2026-03-24 11:59:48 +11:00
• 4e8e9d9fcb mass updates to Cortex XDR - Windows coverage (#146) Bertrand Le Bail 2026-03-24 01:58:45 +01:00
• 7767c8adac Add Elastic scoring details to macOS telemetry feature categories tsale 2026-03-14 12:44:56 -07:00
• 4897cf567e Add LimaCharlie scoring to macOS telemetry feature categories and remove profile activity scoring tsale 2026-03-14 12:35:42 -07:00
• d94cff0e70 Enhance macOS-specific telemetry categories with detailed scoring for process, file, user, and network activities tsale 2026-03-14 12:29:21 -07:00
• efd7831983 Update macOS telemetry generator documentation and implementation details tsale 2026-02-12 13:21:08 -08:00
• 0e4e30e29c Changed the implementation of the disk image mount/unmount for external media telemetry generation tsale 2026-01-27 22:48:26 -08:00
• 456b90e8c0 Add macOS support to EDR telemetry comparison tool tsale 2026-01-27 17:22:32 -08:00
• 2b6e0830f9 Fix conversion script to preserve category columns and headers tsale 2026-01-25 20:23:27 -08:00
• dcc5c175ea Added macOS telemetry generator tool and documentation. Kostas 2026-01-24 00:08:09 -08:00
• 5f1cbffc45 Update GitHub Actions workflow to auto-detect platform changes and add MITRE ATT&CK mappings trigger tsale 2026-01-20 12:52:18 -08:00
• e1974900ed Update EDR_telem_windows.json - Uptycs Win API Telemetry (#154) Josh Lemon 2026-01-20 11:53:09 +11:00
• 5bf3cd98ba Update EDR_telem_linux.json - Uptycs Fuzzy Hash Telemetry (#153) Josh Lemon 2026-01-20 11:52:00 +11:00
• e9f4b16dbb Update SentinelOne Linux eBPF telemetry status (#152) Thibault Boog 2026-01-20 01:50:14 +01:00
• fab45330d8 removed space and File Open/Access events oliviagallucci 2026-01-10 15:53:41 -05:00
• 16ee444881 Added TCC access check oliviagallucci 2026-01-10 15:47:58 -05:00
• 3964f6cf73 test push oliviagallucci 2026-01-10 15:40:42 -05:00
• dcc73514c5 Add C-Prot telemetry coverage to Linux EDR telemetry matrix (#151) Kostas 2025-12-28 11:58:24 -08:00
• a27035f37a Add C-Prot telemetry coverage to Linux EDR telemetry matrix cprot-edr tsale 2025-12-28 11:33:24 -08:00
• 0e333e5c27 telemetry area ideas oliviagallucci 2025-12-16 17:47:35 -05:00
• 20eaaf2f5f removed all non null values oliviagallucci 2025-12-16 15:26:39 -05:00
• a9841b6348 basic files oliviagallucci 2025-12-16 15:14:50 -05:00
• 3aa7200654 base file copied from linux. nulls set oliviagallucci 2025-12-16 10:59:10 -05:00
• a552fbc765 Update EDR_telem_linux.json - Uptycs Driver Load Telemetry via finit_module (#145) Josh Lemon 2025-11-30 06:00:42 +11:00
• e026452b67 Update Uptycs Crontab in Linux Telemetry (#144) Josh Lemon 2025-11-30 05:58:07 +11:00
• 537e92f735 Update Uptycs to include listening port telemetry (#143) Josh Lemon 2025-11-30 05:55:41 +11:00
• f7f722cece IMPHASH Correction (#142) Yousef Helmy 2025-11-29 20:53:50 +02:00
• 37245d0ef6 Updates for MDE on Windows and Linux (#140) Jonathan Devere-Ellery 2025-11-29 19:52:20 +01:00
• d75b3be886 Update multiple telemetries for HarfangLab (#132) Robert Z. 2025-11-29 18:43:17 +00:00
• 5f39823b76 feat: add Windows ServiceCreator telemetry generator tool 0.2 tsale 2025-11-25 11:09:15 -08:00
• 06b34a4b83 Merge pull request #141 from tsale/copilot/update-vendor-name-formatting Kostas 2025-11-16 00:21:20 -08:00
• ea2c9509a4 Replace "PadvishXDR" with "Padvish XDR" in JSON files copilot/update-vendor-name-formatting copilot-swe-agent[bot] 2025-11-16 08:10:32 +00:00
• 1f8d62eba1 Initial plan copilot-swe-agent[bot] 2025-11-16 08:07:43 +00:00
• 6a8defb5aa Cortex XDR - Named Pipe Update (#139) CriimBow 2025-11-10 17:07:28 +01:00
• 9e4b3cafcd feat: enable CrowdStrike telemetry support for three additional Linux events (#138) Kostas 2025-11-06 13:45:23 -08:00
• 1f57b3ae7a feat: enable CrowdStrike telemetry support for three additional Linux events cs-lnx-updates tsale 2025-11-06 13:43:26 -08:00
• c73007980e feat: update manage_test_service to create and manage a telemetry service with systemd tsale 2025-11-05 12:26:24 -08:00
• e16f976a0b fix: update Elastic Win32 API Telemetry support status to Yes (#137) Kostas 2025-10-23 10:50:51 -07:00
• f9c63bbf05 fix: Update vendor evaluation with additional telemetry evidence and revised subcategory statuses (#135) Kostas 2025-10-23 10:33:24 -07:00
• f2c921da9e Added Padvish XDR support (#126) Apsoft-tr 2025-10-15 00:40:04 +03:30
• 5abfab2120 Update partially_value_explanations_windows.json Kostas 2025-09-22 23:37:46 -07:00
• cb3e961e23 feat: Initial commit adding Bitdefender (#131) Kostas 2025-09-22 23:27:57 -07:00
• 46f33908e7 Update Sysmon status to 'No' in EDR telemetry JSON Kostas 2025-09-16 23:18:55 -07:00
• af744c2812 Update Harfanglab status to 'Yes' for Win32API based on evidece provided privately and add new telemetry feature category for volume shadow copy deletion Kostas 2025-09-16 23:12:20 -07:00
• 565c6d81e7 Merge pull request #123 from j91321:vss_deletion Kostas 2025-09-16 22:58:11 -07:00
• bac9e66876 Changed Uptycs to No Kostas 2025-09-16 22:57:20 -07:00
• 9bbb35f9e6 Fixed the missed partial explanation for the windows table tsale 2025-09-15 15:37:20 -07:00
• 671e23e206 partially category fixes tsale 2025-09-15 15:30:48 -07:00
• 23674866f1 fix: - fixed process call stack values - fixed partial explanation tsale 2025-09-15 11:45:52 -07:00
• 5561047811 Add Win32 API Telemetry sub-category to expand Windows telemetry coverage (#130) Kostas 2025-09-15 11:07:33 -07:00
• 7e613dfb2e Add JA3/JA3s sub-category for SSL fingerprint telemetry (Windows) (#129) Kostas 2025-09-07 10:38:18 -07:00
• a6112c0d74 fix: - Corrected score - Added the new sub-category under "Other related events" - Populated vendor info - Added POC for testing/generating telemetry tsale 2025-09-02 09:29:43 -07:00
• 8f7be2ad72 feat: New gh workflow for updating the DB (#128) Kostas 2025-08-25 09:34:05 -07:00
• 733ec70361 Merge pull request #127 from 25004/mde-updates Kostas 2025-08-21 09:48:23 -07:00
• a6e5b2d0fa no udp and no proc termination Ethan Bowen 2025-08-21 17:31:47 +02:00
• 27b3bac963 Volume Shadow Copy Deletion subcategory Ján Trenčanský 2025-07-12 11:02:05 +02:00
• c2bed078e1 Update config.json Kostas 2025-06-09 17:59:53 -07:00
• b8567ecb03 Update config.json Kostas 2025-06-09 12:11:43 -07:00
• d81cf5b476 Changed Service Creation Test Kostas 2025-06-09 11:03:10 -07:00
• 32f6813042 Updated Task Scheduling Event Kostas 2025-06-09 10:52:58 -07:00
• d5aebe5a18 Add HarfangLab telemetry for Linux (#119) Robert Z. 2025-05-03 18:58:31 +02:00
• bd9856338f Add more telemetry coverage for MDE on Windows (#121) Jonathan Devere-Ellery 2025-05-03 18:40:18 +02:00
• 1202eb197b Update EDR_telem_windows.json (#118) Josh Lemon 2025-05-04 02:29:29 +10:00
• fd3d03cb4f Update README.md (#120) Recon Michael 2025-04-11 11:26:26 -06:00
• f7ab0d430e Refactor README.md to improve badge presentation tsale 2025-03-27 10:05:49 -07:00
• fc1e1b0319 Update README.md to enhance project overview and add new sections tsale 2025-03-27 10:00:44 -07:00