diff --git a/CHANGELOG.next.asciidoc b/CHANGELOG.next.asciidoc index 44869afb746..f1ae1b8c533 100644 --- a/CHANGELOG.next.asciidoc +++ b/CHANGELOG.next.asciidoc @@ -292,6 +292,7 @@ https://github.com/elastic/beats/compare/v7.0.0-alpha2...master[Check the HEAD d *Winlogbeat* - Add support for reading from .evtx files. {issue}4450[4450] +- Add support for event ID 4634 and 4647 to the Security module. {pull}12906[12906] ==== Deprecated diff --git a/winlogbeat/_meta/fields.common.yml b/winlogbeat/_meta/fields.common.yml index dcb1d21aba5..3854b353e90 100644 --- a/winlogbeat/_meta/fields.common.yml +++ b/winlogbeat/_meta/fields.common.yml @@ -193,6 +193,13 @@ required: false description: The version number of the event's definition. + - name: logon.type + type: keyword + description: > + Logon type name. This is the descriptive version of the + `winlog.event_data.LogonType` ordinal. This is an enrichment added + by the Security module. + # Aliases for the old fields - key: eventlog title: Event log record diff --git a/winlogbeat/docs/fields.asciidoc b/winlogbeat/docs/fields.asciidoc index 85c924e23ba..43130f2dec5 100644 --- a/winlogbeat/docs/fields.asciidoc +++ b/winlogbeat/docs/fields.asciidoc @@ -4157,3 +4157,13 @@ required: False -- +*`winlog.logon.type`*:: ++ +-- +Logon type name. This is the descriptive version of the `winlog.event_data.LogonType` ordinal. This is an enrichment added by the Security module. + + +type: keyword + +-- + diff --git a/winlogbeat/docs/modules/security.asciidoc b/winlogbeat/docs/modules/security.asciidoc index 13e4d6fd631..01766041239 100644 --- a/winlogbeat/docs/modules/security.asciidoc +++ b/winlogbeat/docs/modules/security.asciidoc @@ -10,6 +10,8 @@ The module has transformations for the following event IDs: * 4624 - An account was successfully logged on. * 4625 - An account failed to log on. +* 4634 - An account was logged off. +* 4647 - User initiated logoff (interactive logon types). * 4648 - A logon was attempted using explicit credentials. More event IDs will be added. diff --git a/winlogbeat/include/fields.go b/winlogbeat/include/fields.go index eb9321ea834..f7de5b2da60 100644 --- a/winlogbeat/include/fields.go +++ b/winlogbeat/include/fields.go @@ -32,5 +32,5 @@ func init() { // AssetBuildFieldsFieldsCommonYml returns asset data. // This is the base64 encoded gzipped contents of build/fields/fields.common.yml. func AssetBuildFieldsFieldsCommonYml() string { - return "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" + return "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" } diff --git a/x-pack/winlogbeat/module/security/_meta/docs.asciidoc b/x-pack/winlogbeat/module/security/_meta/docs.asciidoc index 13e4d6fd631..01766041239 100644 --- a/x-pack/winlogbeat/module/security/_meta/docs.asciidoc +++ b/x-pack/winlogbeat/module/security/_meta/docs.asciidoc @@ -10,6 +10,8 @@ The module has transformations for the following event IDs: * 4624 - An account was successfully logged on. * 4625 - An account failed to log on. +* 4634 - An account was logged off. +* 4647 - User initiated logoff (interactive logon types). * 4648 - A logon was attempted using explicit credentials. More event IDs will be added. diff --git a/x-pack/winlogbeat/module/security/config/winlogbeat-security.js b/x-pack/winlogbeat/module/security/config/winlogbeat-security.js index b598c686a56..424010c333e 100644 --- a/x-pack/winlogbeat/module/security/config/winlogbeat-security.js +++ b/x-pack/winlogbeat/module/security/config/winlogbeat-security.js @@ -7,6 +7,30 @@ var security = (function () { var processor = require("processor"); var winlogbeat = require("winlogbeat"); + var logonTypes = { + "2": "Interactive", + "3": "Network", + "4": "Batch", + "5": "Service", + "7": "Unlock", + "8": "NetworkCleartext", + "9": "NewCredentials", + "10": "RemoteInteractive", + "11": "CachedInteractive", + }; + + var addLogonType = function(evt) { + var lt = evt.Get("winlog.event_data.LogonType"); + if (!lt) { + return; + } + var descriptiveLogonType = logonTypes[lt]; + if (descriptiveLogonType === undefined) { + return; + } + evt.Put("winlog.logon.type", descriptiveLogonType); + }; + var addAuthSuccess = new processor.AddFields({ fields: { "event.category": "authentication", @@ -48,15 +72,22 @@ var security = (function () { evt.Put("process.name", path.basename(exe)); }; + var logoff = new processor.Chain() + .Add(convertAuthentication) + .Add(addLogonType) + .Build(); + var logonSuccess = new processor.Chain() .Add(addAuthSuccess) .Add(convertAuthentication) + .Add(addLogonType) .Add(setProcessNameUsingExe) .Build(); var logonFailed = new processor.Chain() .Add(addAuthFailed) .Add(convertAuthentication) + .Add(addLogonType) .Add(setProcessNameUsingExe) .Build(); @@ -66,6 +97,12 @@ var security = (function () { // 4625 - An account failed to log on. 4625: logonFailed.Run, + + // 4634 - An account was logged off. + 4634: logoff.Run, + + // 4647 - User initiated logoff. + 4647: logoff.Run, // 4648 - A logon was attempted using explicit credentials. 4648: logonSuccess.Run, diff --git a/x-pack/winlogbeat/module/security/test/testdata/security-windows2012r2-logon.evtx.golden.json b/x-pack/winlogbeat/module/security/test/testdata/security-windows2012r2-logon.evtx.golden.json index d9f97fe5e3c..e935633ca5a 100644 --- a/x-pack/winlogbeat/module/security/test/testdata/security-windows2012r2-logon.evtx.golden.json +++ b/x-pack/winlogbeat/module/security/test/testdata/security-windows2012r2-logon.evtx.golden.json @@ -47,6 +47,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -109,6 +112,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -174,6 +180,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Interactive" + }, "opcode": "Info", "process": { "pid": 516, @@ -236,6 +245,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -298,6 +310,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Network" + }, "opcode": "Info", "process": { "pid": 516, @@ -360,6 +375,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Network" + }, "opcode": "Info", "process": { "pid": 516, @@ -422,6 +440,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Network" + }, "opcode": "Info", "process": { "pid": 516, @@ -484,6 +505,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Network" + }, "opcode": "Info", "process": { "pid": 516, @@ -549,6 +573,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Network" + }, "opcode": "Info", "process": { "pid": 516, @@ -611,6 +638,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Interactive" + }, "opcode": "Info", "process": { "pid": 516, @@ -676,6 +706,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "RemoteInteractive" + }, "opcode": "Info", "process": { "pid": 516, @@ -738,6 +771,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Interactive" + }, "opcode": "Info", "process": { "pid": 516, @@ -800,6 +836,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -862,6 +901,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -924,6 +966,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -986,6 +1031,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -1048,6 +1096,9 @@ "keywords": [ "Audit Success" ], + "logon": { + "type": "Service" + }, "opcode": "Info", "process": { "pid": 516, @@ -1113,6 +1164,9 @@ "keywords": [ "Audit Failure" ], + "logon": { + "type": "Interactive" + }, "opcode": "Info", "process": { "pid": 516, diff --git a/x-pack/winlogbeat/module/security/test/testdata/security-windows2016-logoff.evtx b/x-pack/winlogbeat/module/security/test/testdata/security-windows2016-logoff.evtx new file mode 100644 index 00000000000..e1cb21bfc2b Binary files /dev/null and b/x-pack/winlogbeat/module/security/test/testdata/security-windows2016-logoff.evtx differ diff --git a/x-pack/winlogbeat/module/security/test/testdata/security-windows2016-logoff.evtx.golden.json b/x-pack/winlogbeat/module/security/test/testdata/security-windows2016-logoff.evtx.golden.json new file mode 100644 index 00000000000..8ae6fa17df5 --- /dev/null +++ b/x-pack/winlogbeat/module/security/test/testdata/security-windows2016-logoff.evtx.golden.json @@ -0,0 +1,90 @@ +[ + { + "@timestamp": "2019-05-17T11:06:58.210768Z", + "event": { + "action": "Logoff", + "code": 4634, + "kind": "event" + }, + "log": { + "level": "information" + }, + "message": "An account was logged off.\n\nSubject:\n\tSecurity ID:\t\tS-1-5-21-101361758-2486510592-3018839910-1000\n\tAccount Name:\t\taudittest\n\tAccount Domain:\t\tWIN-41OB2LO92CR\n\tLogon ID:\t\t0x767A77\n\nLogon Type:\t\t\t3\n\nThis event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.", + "user": { + "domain": "WIN-41OB2LO92CR", + "id": "S-1-5-21-101361758-2486510592-3018839910-1000", + "name": "audittest" + }, + "winlog": { + "api": "wineventlog", + "channel": "Security", + "computer_name": "WIN-41OB2LO92CR", + "event_data": { + "LogonType": "3", + "TargetLogonId": "0x767a77" + }, + "event_id": 4634, + "keywords": [ + "Audit Success" + ], + "logon": { + "type": "Network" + }, + "opcode": "Info", + "process": { + "pid": 776, + "thread": { + "id": 540 + } + }, + "provider_guid": "{54849625-5478-4994-A5BA-3E3B0328C30D}", + "provider_name": "Microsoft-Windows-Security-Auditing", + "record_id": 485, + "task": "Logoff" + } + }, + { + "@timestamp": "2019-05-19T16:15:38.542273Z", + "event": { + "action": "Logoff", + "code": 4634, + "kind": "event" + }, + "log": { + "level": "information" + }, + "message": "An account was logged off.\n\nSubject:\n\tSecurity ID:\t\tS-1-5-21-101361758-2486510592-3018839910-500\n\tAccount Name:\t\tAdministrator\n\tAccount Domain:\t\tWIN-41OB2LO92CR\n\tLogon ID:\t\t0x104A4A6\n\nLogon Type:\t\t\t3\n\nThis event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.", + "user": { + "domain": "WIN-41OB2LO92CR", + "id": "S-1-5-21-101361758-2486510592-3018839910-500", + "name": "Administrator" + }, + "winlog": { + "api": "wineventlog", + "channel": "Security", + "computer_name": "WIN-41OB2LO92CR", + "event_data": { + "LogonType": "3", + "TargetLogonId": "0x104a4a6" + }, + "event_id": 4634, + "keywords": [ + "Audit Success" + ], + "logon": { + "type": "Network" + }, + "opcode": "Info", + "process": { + "pid": 780, + "thread": { + "id": 820 + } + }, + "provider_guid": "{54849625-5478-4994-A5BA-3E3B0328C30D}", + "provider_name": "Microsoft-Windows-Security-Auditing", + "record_id": 747, + "task": "Logoff" + } + } +] \ No newline at end of file