Azure-Sentinel/Parsers
v-jayakal 726596bd48
Merge pull request #3623 from avital-m/private/avital/DSTIM
Contribute DSTIM workbook
2021-12-20 21:59:01 -08:00
..
AADUserInfo Move New Community Content to Proper Location 2021-06-10 10:41:18 -07:00
ASim [Chore] Changed name to ASimDisabledParsers plural 2021-11-25 10:37:56 +01:00
ASim Microsoft Defender for IoT - Endpoint Rename product 2021-11-03 10:40:18 +02:00
ASim Sysmon for Linux Rename product 2021-11-03 10:40:18 +02:00
ASim Sysmon for Windows Rename product 2021-11-03 10:40:18 +02:00
ASim WindowsEvent Rename product 2021-11-03 10:40:18 +02:00
ASimAuthentication Parser version due to (#3450) 2021-11-17 10:07:30 +02:00
ASimDns Changing parsers description (#3755) 2021-12-19 10:05:25 +02:00
ASimFileEvent Rename product 2021-11-03 10:40:18 +02:00
ASimNetworkSession Merge pull request #3701 from Azure:dev/normalization/proxy-parsers 2021-12-16 10:35:08 +02:00
ASimProcessEvent Fixes broken parser due to missing commas. 2021-11-15 12:22:41 +02:00
ASimRegistry Rename product 2021-11-03 10:40:18 +02:00
ASimWebSession Additional review comments 2021-12-15 12:32:42 +02:00
Akamai Akamai Security Events Data Connector (#1375) 2020-12-04 11:18:30 -08:00
Alsid Add the Codename table mapping for IOAs and remove the \r\n at the end of parsing requests 2021-03-23 12:54:40 +01:00
Apache Removing unicod chars 2021-01-31 12:59:07 -08:00
ArubaClearPass added v6.6+ support 2021-01-25 10:28:46 -08:00
Barracuda Update CGFWFirewallActivity 2021-01-20 04:26:55 +05:30
CassandraDB switch from yaml to txt 2021-10-11 01:11:10 -04:00
CiscoISE Update CiscoISE.txt 2021-05-25 08:38:09 +03:00
CiscoMeraki Merge pull request #1636 from richlilly2004/CiscoMerakiAPI 2021-05-18 21:30:16 -07:00
CiscoUCS ACN_CD_CiscoUCS_Parser01 (#1282) 2020-11-13 12:58:51 -08:00
CiscoUmbrella fixed comma issues 2021-10-22 16:33:53 +05:30
ConfluenceAudit ConfluenceAudit: fixing parser, connector json 2021-04-01 10:05:29 +03:00
CyberArk Removing locale from documentation link (#714) 2020-05-28 13:07:37 -07:00
CylancePROTECT revisions 2020-12-06 10:42:21 -08:00
DSTIM Fix comments 2021-12-19 08:52:06 +02:00
Duo Security Move New Community Content to Proper Location 2021-06-10 10:41:18 -07:00
Exabeam exabeam - update parser 2021-03-18 15:56:42 +02:00
GWorkspaceReports GWorkspace: map time_id to TImeGenerated in script 2021-10-11 11:53:04 +03:00
GitHub Fixed typo visability to visibility in GitHubAuditLog parser 2021-07-07 16:54:21 -07:00
InfobloxNIOS Updated client fix 2021-07-29 09:48:58 +05:30
JiraAudit JiraAudit: parser_function 2021-01-28 16:48:52 +02:00
JuniperSRX revisions 2020-11-19 15:19:10 -08:00
Logstash Typo fixes per PR review 2020-08-18 12:49:02 -07:00
MCAS MCASActivity Data Connector 2021-05-06 19:33:35 +00:00
Morphisec Morphiesc DataConnector (#1435) 2021-01-05 18:13:12 -08:00
NGINX Added NGINX data connector 2021-01-20 14:14:14 +02:00
Netskope New columns 2021-12-16 01:15:50 -08:00
OSSEC ossec - update parser and connector json 2021-03-25 12:39:08 +02:00
Onapsis Adding Onapsis Connector and Workbook (#1303) 2020-11-19 20:24:52 -08:00
OneLogin Removing locale from documentation link (#714) 2020-05-28 13:07:37 -07:00
OracleWebLogicServer oracle web logic server - fix parser instructions 2021-03-31 10:40:09 +03:00
ProofpointPOD adding isfuzzy=true for scneario when the table does not exists 2021-12-16 18:45:10 -08:00
PulseConnectSecure Update PulseConnectSecure.txt 2020-11-11 08:50:26 -08:00
QualysKB revisions 2020-12-09 15:16:22 -08:00
SQLSever Update SQLServer_Parser.txt 2020-07-04 21:10:50 +05:30
SalesforceServiceCloud Salesforce Service Cloud Connector (#1292) 2020-11-16 19:31:20 -08:00
SentinelOne SentinelOne: Samples+ fixes 2021-03-30 15:40:18 +03:00
SophosXGFirewall ACNCD_DataConnectors_final (#767) 2020-07-07 15:25:53 -07:00
SquidProxy Squid Proxy Parser (#1232) 2020-11-17 15:00:02 -08:00
SymantecDLP ACN_CD_SymantecDLP_Parser01 (#1364) 2020-12-04 16:46:08 -08:00
SymantecEndpointProtection regex updates 2021-04-06 15:46:54 -07:00
SymantecProxySG ACNCD_AzureSentinel-DataConnectors (#706) 2020-06-05 14:14:23 -07:00
SymantecVIP ACNCD_AzureSentinel-DataConnectors (#706) 2020-06-05 14:14:23 -07:00
SyslogAUOMS Small bug fix for when auditd is installed 2020-04-17 14:05:36 +00:00
Sysmon Fixing a Typo for SysmonEvent13_RegistrySetValue function 2021-04-08 14:51:41 +02:00
Tomcat tomcat - fix parser 2021-03-24 11:42:28 +02:00
TrendMicro Update TrendMicroTippingPoint 2020-11-06 10:50:17 -06:00
VMwareESXi Update the function name from VMWareESXi to VMwareESXi (#1323) 2020-11-17 15:06:36 -08:00
WorkplaceFacebook WorkplaceFacebook: connector+parser+schema 2021-03-31 14:40:48 +03:00
ZPA zpa - update connector and parser 2021-06-08 17:17:21 +03:00
ZScaler Update ZScalerWeb_Parser.csl 2020-10-28 07:56:34 -04:00
ZoomReports ZoomReports: table, parser, sample 2021-03-22 16:23:57 +02:00
pfsense workbook, connector, parsers 2021-03-02 22:23:45 +00:00
AwsS3BucketAPILogsParser.txt Couple additional fixes 2021-02-01 08:22:36 -08:00
Cisco_ISEParser.txt added comments for locale 2020-09-25 11:42:02 -07:00
CommonSecurityLogs-AdditionalExtensionParser.txt Update CommonSecurityLogs-AdditionalExtensionParser.txt 2020-09-02 15:41:32 -07:00
Epic_Parser.csl Update Epic_Parser.csl 2020-07-16 09:03:02 -04:00
ForgeRockParser.txt Update ForgeRockParser.txt 2020-07-23 13:59:35 -07:00
KVPairExtraction Update KVPairExtraction 2021-03-24 21:37:05 -07:00
Netscaler_parser.csl Update Netscaler_parser.csl 2020-07-17 08:38:41 -04:00
OneIdentity_Safeguard.txt Update OneIdentity_Safeguard.txt 2021-05-06 08:42:24 -07:00
PAN_Parser.csl Cleaned up some fields 2020-07-29 09:09:03 -04:00
Readme Update Readme 2021-01-19 21:07:07 -08:00
RemoteDesktopServices-RdpCoreTS-parser.txt Locale removed in URL 2020-05-29 09:39:03 +02:00
Teams_parser.txt Removing locale from documentation link (#714) 2020-05-28 13:07:37 -07:00
WatchGuardFirebox.txt Align WatchGuard parser to Azure Sentinel CIM 2021-06-14 23:07:57 +01:00
Zoom_parser.txt Removing locale from documentation link (#714) 2020-05-28 13:07:37 -07:00
bind9_syslog.txt bind9 parser comment fixes 2020-10-23 13:14:39 -05:00
squid_parser.txt Removing locale from documentation link (#714) 2020-05-28 13:07:37 -07:00

Readme

For details on creating a Parsers, see the Contribution guidance - https://github.com/Azure/Azure-Sentinel/wiki/Contribute-to-Sentinel-GitHub-Community-of-Queries#example-parser