File tree
1,063 files changed
+10661
-57897
lines changed- packages
- 1password
- data_stream
- audit_events/fields
- item_usages/fields
- signin_attempts/fields
- docs
- akamai
- data_stream/siem/fields
- docs
- amazon_security_lake
- _dev/build
- data_stream
- application_activity/fields
- discovery/fields
- event/fields
- findings/fields
- iam/fields
- network_activity/fields
- system_activity/fields
- docs
- apache
- _dev/build/docs
- data_stream
- access
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- error/_dev/test/pipeline
- docs
- atlassian_bitbucket
- data_stream/audit/fields
- docs
- atlassian_confluence
- data_stream/audit/fields
- docs
- atlassian_jira
- data_stream/audit/fields
- docs
- auth0
- data_stream/logs/fields
- docs
- aws_bedrock
- data_stream/invocation/fields
- docs
- azure_blob_storage
- _dev/build
- fields
- azure_frontdoor
- data_stream
- access/fields
- waf/fields
- docs
- azure_functions
- kibana/dashboard
- azure_network_watcher_nsg
- _dev/build
- docs
- data_stream/log/fields
- docs
- azure_network_watcher_vnet
- _dev/build
- docs
- data_stream/log/fields
- docs
- barracuda_cloudgen_firewall
- data_stream/log/fields
- docs
- barracuda
- data_stream/waf/fields
- docs
- bbot
- _dev/build
- data_stream/asm_intel
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- docs
- kibana
- dashboard
- search
- bitdefender
- data_stream
- push_configuration/fields
- push_notifications/fields
- push_statistics/fields
- docs
- bitwarden
- _dev/build
- data_stream
- collection/fields
- event/fields
- group/fields
- member/fields
- policy/fields
- docs
- box_events
- data_stream/events/fields
- docs
- carbon_black_cloud
- data_stream
- alert_v7/fields
- alert/fields
- asset_vulnerability_summary/fields
- audit/fields
- endpoint_event/fields
- watchlist_hit/fields
- docs
- carbonblack_edr
- data_stream/log/fields
- docs
- cel
- fields
- cisa_kevs
- data_stream/vulnerability/fields
- docs
- cisco_duo
- data_stream
- admin/fields
- auth/fields
- offline_enrollment/fields
- summary
- _dev/test/pipeline
- fields
- telephony/fields
- docs
- cisco_meraki
- data_stream
- events
- _dev/test/system
- fields
- log
- _dev/test/system
- fields
- docs
- cisco_secure_endpoint
- data_stream/event/fields
- docs
- cisco_umbrella
- data_stream/log/fields
- docs
- cloud_security_posture
- data_stream/findings
- cloudflare_logpush
- data_stream
- access_request/fields
- audit/fields
- casb/fields
- device_posture/fields
- dns_firewall/fields
- dns/fields
- firewall_event/fields
- gateway_dns/fields
- gateway_http/fields
- gateway_network/fields
- http_request/fields
- magic_ids/fields
- nel_report/fields
- network_analytics/fields
- network_session/fields
- sinkhole_http/fields
- spectrum_event/fields
- workers_trace/fields
- docs
- cloudflare
- data_stream
- audit/fields
- logpull/fields
- docs
- cribl
- _dev/build
- data_stream/logs
- elasticsearch/ingest_pipeline
- fields
- crowdstrike
- _dev/build
- data_stream
- alert/fields
- falcon/fields
- fdr/fields
- host/fields
- docs
- cyberark_pta
- data_stream/events/fields
- docs
- cyberarkpas
- data_stream/audit
- _dev/test
- pipeline
- system
- fields
- docs
- cybereason
- _dev/build
- data_stream
- logon_session/fields
- malop_connection/fields
- malop_process/fields
- malware/fields
- poll_malop/fields
- suspicions_process/fields
- docs
- cylance
- data_stream/protect/fields
- docs
- darktrace
- data_stream
- ai_analyst_alert/fields
- model_breach_alert/fields
- system_status_alert/fields
- docs
- entityanalytics_ad
- _dev/build
- data_stream/user
- _dev/test/pipeline
- fields
- docs
- entityanalytics_okta
- _dev/build
- data_stream/user/fields
- docs
- eset_protect
- _dev/build/docs
- data_stream
- detection/fields
- device_task/fields
- event/fields
- docs
- f5_bigip
- data_stream/log/fields
- docs
- fireeye
- data_stream/nx/fields
- docs
- forcepoint_web
- data_stream/logs/fields
- docs
- forgerock
- data_stream
- am_access/fields
- am_activity/fields
- am_authentication/fields
- am_config/fields
- am_core/fields
- idm_access/fields
- idm_activity/fields
- idm_authentication/fields
- idm_config/fields
- idm_core/fields
- idm_sync/fields
- docs
- gcp_pubsub
- fields
- github
- data_stream
- audit/fields
- code_scanning/fields
- dependabot/fields
- issues/fields
- secret_scanning/fields
- docs
- gitlab
- data_stream
- api/fields
- production/fields
- docs
- google_cloud_storage
- _dev/build
- fields
- google_scc
- _dev/build
- data_stream
- asset/fields
- audit/fields
- finding/fields
- source/fields
- docs
- google_workspace
- _dev/build
- data_stream
- access_transparency/fields
- admin/fields
- alert/fields
- context_aware_access/fields
- device/fields
- drive/fields
- gcp/fields
- group_enterprise/fields
- groups/fields
- login/fields
- rules/fields
- saml/fields
- token/fields
- user_accounts/fields
- docs
- hashicorp_vault
- kibana
- dashboard
- search
- http_endpoint
- fields
- httpjson
- data_stream/generic/fields
- imperva_cloud_waf
- _dev/build/docs
- data_stream/event
- _dev/test/pipeline
- fields
- docs
- infoblox_bloxone_ddi
- data_stream
- dhcp_lease/fields
- dns_config/fields
- dns_data/fields
- docs
- infoblox_nios
- data_stream/log/fields
- docs
- jamf_compliance_reporter
- data_stream/log/fields
- docs
- jamf_protect
- data_stream
- alerts/fields
- telemetry_legacy/fields
- telemetry/fields
- web_threat_events/fields
- web_traffic_events/fields
- docs
- jumpcloud
- data_stream/events/fields
- docs
- kafka
- kibana
- dashboard
- search
- keycloak
- data_stream/log
- fields
- docs
- lastpass
- data_stream
- event_report/fields
- user/fields
- docs
- logstash
- data_stream/pipeline
- agent/stream
- fields
- docs
- kibana/dashboard
- lumos
- data_stream/activity_logs/fields
- docs
- lyve_cloud
- data_stream/audit/fields
- docs
- m365_defender
- _dev/build
- data_stream
- alert/fields
- event
- _dev/test/pipeline
- fields
- incident/fields
- log/fields
- docs
- mattermost
- data_stream/audit/fields
- docs
- menlo
- data_stream
- dlp/fields
- web/fields
- docs
- microsoft_defender_cloud
- _dev/build
- data_stream/event/fields
- docs
- microsoft_defender_endpoint
- data_stream/log/fields
- docs
- microsoft_exchange_online_message_trace
- data_stream/log/fields
- docs
- microsoft_sqlserver
- kibana/dashboard
- mimecast
- data_stream
- archive_search_logs/fields
- audit_events/fields
- dlp_logs/fields
- siem_logs/fields
- threat_intel_malware_customer/fields
- threat_intel_malware_grid/fields
- ttp_ap_logs/fields
- ttp_ip_logs/fields
- ttp_url_logs/fields
- docs
- mongodb_atlas
- kibana/dashboard
- mongodb
- kibana/dashboard
- netskope
- data_stream
- alerts
- _dev/test/pipeline
- fields
- events
- _dev/test/pipeline
- fields
- docs
- o365
- data_stream/audit/fields
- docs
- okta
- data_stream/system/fields
- docs
- opencanary
- data_stream/events
- _dev/test/pipeline
- fields
- docs
- panw_cortex_xdr
- data_stream
- alerts/fields
- incidents/fields
- docs
- php_fpm
- kibana/dashboard
- ping_one
- data_stream/audit/fields
- docs
- postgresql
- kibana
- dashboard
- search
- pps
- data_stream/log/fields
- docs
- prisma_cloud
- _dev/build
- data_stream
- alert/fields
- audit/fields
- host_profile/fields
- host/fields
- incident_audit/fields
- docs
- proofpoint_tap
- data_stream
- clicks_blocked
- fields
- clicks_permitted
- fields
- message_blocked
- fields
- message_delivered
- fields
- docs
- pulse_connect_secure
- data_stream/log/fields
- docs
- qualys_vmdr
- _dev/build
- data_stream
- asset_host_detection/fields
- knowledge_base/fields
- user_activity/fields
- docs
- rabbitmq
- kibana/dashboard
- rapid7_insightvm
- _dev/build
- data_stream
- asset/fields
- vulnerability/fields
- docs
- redis
- kibana/dashboard
- santa
- data_stream/log/fields
- docs
- sentinel_one_cloud_funnel
- _dev/build/docs
- data_stream/event/fields
- docs
- sentinel_one
- _dev/deploy/docker/files
- data_stream
- activity/fields
- agent/fields
- alert/fields
- group/fields
- threat/fields
- docs
- slack
- data_stream/audit/fields
- docs
- snyk
- _dev/deploy/docker/files
- data_stream
- audit_logs
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- audit/fields
- issues/fields
- vulnerabilities/fields
- docs
- sophos_central
- _dev/build
- data_stream
- alert/fields
- event/fields
- docs
- symantec_edr_cloud
- _dev/build
- docs
- data_stream/incident/fields
- docs
- symantec_endpoint_security
- _dev/build
- data_stream/event/fields
- docs
- symantec_endpoint
- data_stream/log
- _dev/test/pipeline
- fields
- docs
- system
- data_stream/filesystem/agent/stream
- tanium
- _dev/build
- data_stream
- action_history/fields
- client_status/fields
- discover/fields
- endpoint_config/fields
- reporting/fields
- threat_response/fields
- docs
- tenable_io
- data_stream
- asset/fields
- plugin/fields
- scan/fields
- vulnerability/fields
- docs
- tenable_sc
- data_stream
- asset/fields
- plugin/fields
- vulnerability/fields
- docs
- thycotic_ss
- data_stream/logs/fields
- docs
- ti_abusech
- data_stream
- malwarebazaar/fields
- malware/fields
- threatfox/fields
- url
- _dev/test/pipeline
- fields
- docs
- elasticsearch/transform
- latest_malwarebazaar/fields
- latest_malware/fields
- latest_url/fields
- ti_anomali
- data_stream/threatstream/fields
- docs
- ti_cif3
- data_stream/feed/fields
- docs
- ti_crowdstrike
- _dev/build/docs
- data_stream
- intel
- _dev/test/pipeline
- fields
- ioc/fields
- docs
- elasticsearch/transform
- latest_intel/fields
- latest_ioc/fields
- ti_cybersixgill
- data_stream/threat/fields
- docs
- elasticsearch/transform/latest_ioc/fields
- ti_eclecticiq
- _dev/build
- data_stream/threat
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- docs
- elasticsearch/transform/latest_ioc/fields
- ti_eset
- _dev/build/docs
- data_stream
- apt/fields
- botnet/fields
- cc/fields
- domains/fields
- files/fields
- ip/fields
- url/fields
- docs
- ti_maltiverse
- data_stream/indicator/fields
- docs
- ti_mandiant_advantage
- _dev/build
- data_stream/threat_intelligence
- fields
- docs
- ti_misp
- data_stream
- threat_attributes/fields
- threat/fields
- docs
- ti_opencti
- _dev/build
- data_stream/indicator
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- docs
- ti_otx
- data_stream
- pulses_subscribed/fields
- threat/fields
- docs
- ti_rapid7_threat_command
- data_stream
- alert/fields
- ioc/fields
- vulnerability/fields
- docs
- ti_recordedfuture
- data_stream/threat/fields
- docs
- ti_threatconnect
- _dev/build
- data_stream/indicator/fields
- docs
- ti_threatq
- data_stream/threat/fields
- docs
- elasticsearch/transform/latest_ioc/fields
- ti_util
- tines
- data_stream
- audit_logs/fields
- time_saved/fields
- docs
- trellix_edr_cloud
- _dev/build
- data_stream/event/fields
- docs
- trellix_epo_cloud
- _dev/build
- data_stream
- device/fields
- event/fields
- group/fields
- docs
- trend_micro_vision_one
- data_stream
- alert/fields
- audit/fields
- detection/fields
- docs
- trendmicro
- _dev/build
- data_stream/deep_security/fields
- docs
- vectra_detect
- _dev/build
- data_stream/log
- _dev/test
- pipeline
- system
- fields
- docs
- vsphere
- data_stream/log/fields
- kibana/dashboard
- websphere_application_server
- kibana/dashboard
- wiz
- _dev/build
- data_stream
- audit/fields
- issue
- _dev/test/pipeline
- fields
- vulnerability
- _dev/test/pipeline
- fields
- docs
- zerofox
- data_stream/alerts/fields
- docs
- zeronetworks
- data_stream/audit/fields
- zoom
- data_stream/webhook/fields
- docs
- zscaler_zia
- _dev/build
- data_stream
- alerts/fields
- dns/fields
- firewall/fields
- tunnel/fields
- web/fields
- docs
- zscaler_zpa
- _dev/build
- data_stream
- app_connector_status/fields
- audit/fields
- browser_access/fields
- user_activity/fields
- user_status/fields
- docs
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
1,063 files changed
+10661
-57897
lines changedOriginal file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
2 | 7 |
| |
3 | 8 |
| |
4 | 9 |
| |
|
Lines changed: 0 additions & 44 deletions
This file was deleted.
Lines changed: 0 additions & 48 deletions
This file was deleted.
Lines changed: 0 additions & 50 deletions
This file was deleted.
Large diffs are not rendered by default.
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
3 | 3 |
| |
4 |
| - | |
| 4 | + | |
5 | 5 |
| |
6 | 6 |
| |
7 | 7 |
| |
8 | 8 |
| |
9 | 9 |
| |
10 | 10 |
| |
11 | 11 |
| |
12 |
| - | |
| 12 | + | |
13 | 13 |
| |
14 | 14 |
| |
15 | 15 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
2 | 7 |
| |
3 | 8 |
| |
4 | 9 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
1 | 1 |
| |
2 | 2 |
| |
3 | 3 |
| |
4 |
| - | |
5 |
| - | |
6 |
| - | |
| 4 | + | |
7 | 5 |
| |
8 | 6 |
| |
9 |
| - | |
10 |
| - | |
11 |
| - | |
12 |
| - | |
13 |
| - | |
14 |
| - | |
15 |
| - | |
16 |
| - | |
17 |
| - | |
18 |
| - | |
19 |
| - | |
20 |
| - | |
21 |
| - | |
22 |
| - | |
23 |
| - | |
24 |
| - | |
25 |
| - | |
26 |
| - | |
27 |
| - | |
28 |
| - | |
29 |
| - | |
30 |
| - | |
31 |
| - | |
32 |
| - | |
33 |
| - | |
34 |
| - | |
35 |
| - | |
36 |
| - | |
37 |
| - | |
38 |
| - | |
39 |
| - | |
40 |
| - | |
41 |
| - | |
42 |
| - | |
43 |
| - | |
44 |
| - | |
45 |
| - | |
46 |
| - | |
47 |
| - | |
48 |
| - | |
49 |
| - | |
50 |
| - | |
51 |
| - | |
52 |
| - | |
53 |
| - | |
54 |
| - | |
55 |
| - | |
56 |
| - | |
57 |
| - | |
58 |
| - | |
59 |
| - | |
60 |
| - | |
61 |
| - | |
62 |
| - | |
63 |
| - | |
64 |
| - | |
65 |
| - | |
66 |
| - | |
67 |
| - | |
68 |
| - | |
69 |
| - | |
70 |
| - | |
71 |
| - | |
72 |
| - | |
73 |
| - | |
74 |
| - | |
75 |
| - | |
76 |
| - | |
77 |
| - | |
78 |
| - | |
79 |
| - | |
80 |
| - | |
81 |
| - | |
82 |
| - | |
83 |
| - | |
84 |
| - | |
85 |
| - | |
86 |
| - | |
87 |
| - | |
88 |
| - | |
89 |
| - | |
90 |
| - | |
91 |
| - | |
92 |
| - | |
93 |
| - | |
94 |
| - | |
95 |
| - | |
96 |
| - | |
97 |
| - | |
98 | 7 |
| |
99 | 8 |
| |
100 | 9 |
| |
|
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
7 | 7 |
| |
8 | 8 |
| |
9 | 9 |
| |
10 |
| - | |
11 |
| - | |
12 |
| - |
0 commit comments