Repository navigation
Commit 40d1f1b
authored
File tree
- .buildkite
- scripts
- .github
- ISSUE_TEMPLATE
- workflows
- updatecli/updatecli.d
- docs
- extend
- images
- packages
- 1password
- abnormal_security
- admin_by_request_epm
- akamai
- amazon_security_lake
- data_stream/event
- agent/stream
- atlassian_bitbucket
- atlassian_confluence
- atlassian_jira
- auditd_manager
- data_stream/auditd
- fields
- docs
- auth0
- authentik
- aws_bedrock
- data_stream/invocation
- agent/stream
- aws_logs
- data_stream/generic
- agent/stream
- aws_mq
- _dev/build/docs
- data_stream/rabbitmq_metrics
- agent/stream
- elasticsearch/ingest_pipeline
- fields
- docs
- img
- kibana/dashboard
- aws
- data_stream
- apigateway_logs
- agent/stream
- cloudfront_logs
- agent/stream
- cloudtrail
- agent/stream
- ec2_logs
- agent/stream
- elb_logs
- agent/stream
- emr_logs
- agent/stream
- firewall_logs
- agent/stream
- guardduty
- agent/stream
- route53_resolver_logs
- agent/stream
- s3access
- agent/stream
- vpcflow
- agent/stream
- waf
- agent/stream
- azure_blob_storage
- azure_frontdoor
- azure_network_watcher_nsg
- azure_network_watcher_vnet
- azure
- data_stream
- events
- platformlogs
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- barracuda_cloudgen_firewall
- barracuda
- bbot
- beaconing
- elasticsearch/transform/pivot_transform
- beyondinsight_password_safe
- bitdefender
- bitwarden
- blacklens
- box_events
- data_stream/events
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- docs
- canva
- data_stream/audit
- agent/stream
- carbon_black_cloud
- data_stream
- alert_v7
- agent/stream
- alert
- agent/stream
- endpoint_event
- agent/stream
- watchlist_hit
- agent/stream
- carbonblack_edr
- checkpoint_email
- checkpoint_harmony_endpoint
- cisa_kevs
- cisco_asa
- data_stream/log
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- cisco_duo
- data_stream/auth
- _dev/test/system
- agent/stream
- cisco_meraki
- cisco_secure_endpoint
- cisco_umbrella
- data_stream/log
- agent/stream
- citrix_adc
- _dev/build/docs
- data_stream/log
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- docs
- claroty_ctd
- cloudflare_logpush
- data_stream
- access_request
- agent/stream
- audit
- agent/stream
- casb
- agent/stream
- device_posture/agent/stream
- dns_firewall/agent/stream
- dns
- agent/stream
- firewall_event/agent/stream
- gateway_dns/agent/stream
- gateway_http/agent/stream
- gateway_network/agent/stream
- http_request/agent/stream
- magic_ids
- agent/stream
- nel_report
- agent/stream
- network_analytics
- agent/stream
- network_session
- agent/stream
- sinkhole_http
- agent/stream
- spectrum_event
- agent/stream
- workers_trace
- agent/stream
- cloudflare
- corelight
- cribl
- crowdstrike/data_stream/fdr/_dev/deploy/tf/files
- cyberark_epm
- cyberark_pta
- cyberarkpas
- cybereason
- cylance
- darktrace
- ded
- elasticsearch/transform/pivot_transform
- dga
- digital_guardian
- elasticsearch
- data_stream
- index_recovery/_dev/test/system
- index_summary/_dev/test/system
- index/_dev/test/system
- elasticsearch/transform/index_pivot
- kibana/dashboard
- entityanalytics_ad
- entityanalytics_okta
- _dev/build/docs
- data_stream
- device
- fields
- entity
- _dev/test
- pipeline
- system
- agent/stream
- elasticsearch/ingest_pipeline
- fields
- user
- docs
- eset_protect
- data_stream/event
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- docs
- ess_billing
- _dev/build/docs
- docs
- f5_bigip
- data_stream/log
- agent/stream
- falco
- fireeye
- first_epss
- forcepoint_web
- forgerock
- fortinet_fortigate
- data_stream/log/elasticsearch/ingest_pipeline
- gcp_pubsub
- gigamon
- github
- elasticsearch/transform/latest_code_scanning
- fields
- gitlab
- google_cloud_storage
- google_scc
- _dev/build/docs
- data_stream
- asset/elasticsearch/ingest_pipeline
- audit/elasticsearch/ingest_pipeline
- finding/elasticsearch/ingest_pipeline
- source/elasticsearch/ingest_pipeline
- docs
- google_workspace
- _dev/build/docs
- data_stream
- access_transparency/elasticsearch/ingest_pipeline
- admin/elasticsearch/ingest_pipeline
- alert/elasticsearch/ingest_pipeline
- context_aware_access/elasticsearch/ingest_pipeline
- device/elasticsearch/ingest_pipeline
- drive/elasticsearch/ingest_pipeline
- gcp/elasticsearch/ingest_pipeline
- group_enterprise/elasticsearch/ingest_pipeline
- groups/elasticsearch/ingest_pipeline
- login/elasticsearch/ingest_pipeline
- rules/elasticsearch/ingest_pipeline
- saml/elasticsearch/ingest_pipeline
- token/elasticsearch/ingest_pipeline
- user_accounts/elasticsearch/ingest_pipeline
- docs
- http_endpoint
- httpjson
- imperva_cloud_waf
- data_stream/event
- agent/stream
- elasticsearch/ingest_pipeline
- infoblox_bloxone_ddi
- infoblox_nios
- data_stream/log
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- jamf_compliance_reporter
- jamf_protect/data_stream
- alerts
- agent/stream
- telemetry_legacy
- agent/stream
- telemetry
- agent/stream
- web_threat_events
- agent/stream
- web_traffic_events
- agent/stream
- jamf_pro
- data_stream
- events
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- inventory
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- jumpcloud
- keycloak
- lastpass
- lmd
- elasticsearch/transform/pivot_transform
- lumos
- lyve_cloud
- m365_defender
- _dev/build/docs
- data_stream/alert
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- docs
- mattermost
- menlo
- microsoft_defender_cloud
- microsoft_defender_endpoint
- _dev/build/docs
- docs
- microsoft_exchange_online_message_trace
- microsoft_exchange_server
- data_stream/messagetracking
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- microsoft_sentinel
- mimecast
- _dev/deploy/docker/files
- data_stream
- archive_search_logs/agent/stream
- cloud_integrated_logs
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- dlp_logs
- _dev/test/pipeline
- agent/stream
- elasticsearch/ingest_pipeline
- message_release_logs
- _dev/test/pipeline
- agent/stream
- elasticsearch/ingest_pipeline
- siem_logs
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- threat_intel_malware_customer/agent/stream
- threat_intel_malware_grid/agent/stream
- ttp_ap_logs
- _dev/test/pipeline
- agent/stream
- elasticsearch/ingest_pipeline
- ttp_ip_logs
- _dev/test/pipeline
- agent/stream
- elasticsearch/ingest_pipeline
- ttp_url_logs
- _dev/test/pipeline
- agent/stream
- elasticsearch/ingest_pipeline
- netskope
- o365
- data_stream/audit
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- docs
- openai
- _dev/build/docs
- data_stream
- audio_speeches
- audio_transcriptions
- code_interpreter_sessions
- completions
- embeddings
- images
- moderations
- vector_stores
- docs
- opencanary
- panw_cortex_xdr
- _dev/deploy/docker
- data_stream/alerts
- _dev/test
- pipeline
- system
- agent/stream
- elasticsearch/ingest_pipeline
- fields
- docs
- ping_federate
- ping_one
- pps
- prisma_access
- prisma_cloud
- problemchild
- proofpoint_on_demand
- proofpoint_tap
- pulse_connect_secure
- qualys_vmdr
- rapid7_insightvm
- rubrik
- _dev/build/docs
- data_stream
- drives
- filesets
- global_cluster_performance
- managed_volumes
- monitoring_jobs
- mssql_databases
- node_statistics
- agent/stream
- physical_hosts
- sla_domains
- _dev/test/pipeline
- agent/stream
- elasticsearch/ingest_pipeline
- fields
- tasks
- unmanaged_objects
- _dev/test/pipeline
- agent/stream
- elasticsearch/ingest_pipeline
- fields
- virtual_machines
- docs
- sailpoint_identity_sc
- santa
- sentinel_one_cloud_funnel
- data_stream/event
- agent/stream
- servicenow
- data_stream/event
- agent/stream
- slack
- sophos_central
- spycloud
- sublime_security
- data_stream
- audit/agent/stream
- email_message
- agent/stream
- message_event
- agent/stream
- symantec_endpoint_security
- data_stream/event
- agent/stream
- symantec_endpoint
- sysdig
- system
- data_stream/security
- elasticsearch/ingest_pipeline
- tanium
- data_stream
- action_history
- agent/stream
- client_status
- agent/stream
- discover
- agent/stream
- endpoint_config
- agent/stream
- reporting
- agent/stream
- threat_response
- agent/stream
- teleport
- data_stream/audit
- _dev/test/system
- elasticsearch/ingest_pipeline
- tenable_io
- _dev/build/docs
- data_stream
- asset/elasticsearch/ingest_pipeline
- plugin/elasticsearch/ingest_pipeline
- scan/elasticsearch/ingest_pipeline
- vulnerability/elasticsearch/ingest_pipeline
- docs
- tenable_sc
- threat_map
- thycotic_ss
- ti_abusech
- ti_cif3
- ti_crowdstrike
- data_stream
- intel/_dev/test/pipeline
- ioc
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- ti_custom
- elasticsearch/transform/latest_ioc
- fields
- ti_cybersixgill
- ti_domaintools
- ti_eclecticiq
- ti_eset
- ti_maltiverse
- ti_mandiant_advantage
- ti_misp
- ti_opencti
- ti_otx
- ti_rapid7_threat_command
- ti_recordedfuture
- ti_threatconnect
- ti_threatq
- ti_util
- tines
- trellix_edr_cloud
- data_stream/event
- agent/stream
- trellix_epo_cloud
- trend_micro_vision_one
- trendmicro
- tychon
- elasticsearch/transform
- arp
- fields
- browser
- fields
- ciphers
- fields
- coams
- fields
- cpu
- fields
- cve
- fields
- epp
- fields
- exposedservice
- fields
- externaldevicecontrol
- fields
- features
- fields
- harddrive
- fields
- hardware
- fields
- host
- fields
- networkadapter
- fields
- softwareinventory
- fields
- stig
- fields
- systemcerts
- fields
- volume
- fields
- vectra_detect
- watchguard_firebox
- data_stream/log
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- fields
- docs
- websocket
- windows
- _dev/build
- data_stream
- applocker_exe_and_dll
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- applocker_msi_and_script
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- applocker_packaged_app_deployment
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- applocker_packaged_app_execution
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- forwarded
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- powershell_operational
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- powershell
- _dev/test
- pipeline
- system
- elasticsearch/ingest_pipeline
- sysmon_operational
- _dev/test/pipeline
- elasticsearch/ingest_pipeline
- windows_defender
- _dev/test
- pipeline
- system
- elasticsearch/ingest_pipeline
- docs
- winlog
- agent/input
- wiz
- elasticsearch/transform
- latest_cdr_misconfigurations
- fields
- latest_cdr_vulnerabilities
- fields
- zerofox
- zeronetworks
- zoom
- zscaler_zpa
Some content is hidden
Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
21 | 21 | | |
22 | 22 | | |
23 | 23 | | |
24 | | - | |
| 24 | + | |
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
858 | 858 | | |
859 | 859 | | |
860 | 860 | | |
| 861 | + | |
| 862 | + | |
| 863 | + | |
| 864 | + | |
| 865 | + | |
| 866 | + | |
861 | 867 | | |
862 | 868 | | |
863 | 869 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
35 | 35 | | |
36 | 36 | | |
37 | 37 | | |
| 38 | + | |
38 | 39 | | |
39 | 40 | | |
40 | | - | |
| 41 | + | |
41 | 42 | | |
42 | 43 | | |
| 44 | + | |
| 45 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
464 | 464 | | |
465 | 465 | | |
466 | 466 | | |
467 | | - | |
468 | | - | |
469 | | - | |
470 | | - | |
471 | | - | |
472 | | - | |
473 | | - | |
474 | | - | |
475 | | - | |
476 | | - | |
477 | | - | |
478 | | - | |
479 | | - | |
480 | | - | |
481 | | - | |
482 | | - | |
483 | | - | |
484 | | - | |
485 | | - | |
486 | | - | |
487 | | - | |
488 | | - | |
489 | | - | |
| 467 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
| 19 | + | |
19 | 20 | | |
20 | 21 | | |
21 | 22 | | |
| |||
34 | 35 | | |
35 | 36 | | |
36 | 37 | | |
| 38 | + | |
37 | 39 | | |
38 | 40 | | |
39 | 41 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
| 19 | + | |
19 | 20 | | |
20 | 21 | | |
21 | 22 | | |
| |||
34 | 35 | | |
35 | 36 | | |
36 | 37 | | |
| 38 | + | |
37 | 39 | | |
38 | 40 | | |
39 | 41 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
25 | 25 | | |
26 | 26 | | |
27 | 27 | | |
28 | | - | |
| 28 | + | |
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| 8 | + | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
30 | | - | |
| 30 | + | |
31 | 31 | | |
32 | | - | |
33 | | - | |
| 32 | + | |
| 33 | + | |
| 34 | + | |
| 35 | + | |
| 36 | + | |
| 37 | + | |
34 | 38 | | |
35 | 39 | | |
36 | 40 | | |
| |||
0 commit comments