19 Commits

Author	SHA1	Message	Date
vh	5dc30bd388	Carbonblack, Arcsight ESM, Elastic Rule	2020-02-24 19:29:45 +02:00
vh	516e61fdb0	t	2020-02-24 19:23:11 +02:00
vh	dc5a31aebc	Updated Azure Sentinel backend	2020-01-31 17:17:24 +02:00
Thomas Patzke	7b62b931ce	Moved ala-rule backend code into ala backend module	2020-01-13 11:24:46 +01:00
vh	f9570a48cb	Azure Sentinel backend (ala) - Fixed path in query ... Added new backend Azure Sentinel Rule (ala-rule)	2019-12-30 16:11:53 +02:00
vh	d42409372c	Azure Sentinel backend (ala) - Fixed path in query ... Added new backend Azure Sentinel Rule (ala-rule)	2019-12-30 16:09:19 +02:00
John Tuckner	3529b717cb	fixed backend errors in ala	2019-06-10 09:25:59 -05:00
Florian Roth	a6d2a5d79b	fix: more general fixes of the var type issue	2019-05-15 21:25:53 +02:00
Thomas Patzke	d0bd8a2a41	Mandatory configuration for most backends	2019-04-22 23:40:21 +02:00
Thomas Patzke	2dda9a7b77	Moved Sysmon schema XML from contrib directory into module	2019-03-16 00:59:29 +01:00
Thomas Patzke	3f7e08733a	Added backend option 'sysmon' for ala backend	2019-03-15 23:26:15 +01:00
John Tuckner	a1ba04aec8	modified process creation logic	2019-03-08 00:01:43 -06:00
tuckner	e9ddd933f8	more fixes for process creation	2019-03-07 16:28:35 -06:00
John Tuckner	5a64f572e3	update	2019-03-07 10:32:59 -06:00
John Tuckner	283bd278f4	added eventid to sysmon process creation	2019-03-05 20:58:23 -06:00
John Tuckner	971bd49071	accomodated process creation and slash escapes	2019-03-05 20:50:30 -06:00
tuckner	cf186387af	Added schema file checking	2019-03-04 11:53:51 -06:00
tuckner	c5796d7853	Added Azure Log Analytics backend	2019-03-04 10:49:50 -06:00
tuckner	8179d182c4	added azure log analytics	2019-03-04 10:44:45 -06:00