trinitor/DetectionLab
1
0 Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix sysmon sourcetype, update ThreatHunting app

Browse Source
This commit is contained in:
Chris Long committed 2020-08-04 21:58:18 -07:00
1 parent 3fc3119be2
commit 84c29f6739
31 files changed
+123 -97
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

Vagrant/resources/splunk_forwarder/wef_inputs.conf
+1 -1
View File
@@ -323,7 +323,7 @@ current_only = 0
checkpointInterval = 5
[WinEventLog://WEC6-Sysmon]
sourcetype = "XmlWinEventLog:Microsoft-Windows-Sysmon/Operational"
sourcetype = XmlWinEventLog:Microsoft-Windows-Sysmon/Operational
source = WinEventLog:Sysmon
index=sysmon
disabled = 0
Vagrant/resources/splunk_server/threathunting_143.tgz
BIN
View File
Binary file not shown.
Vagrant/resources/splunk_server/threathunting_144.tgz
BIN
View File
Binary file not shown.