-
Notifications
You must be signed in to change notification settings - Fork 392
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add CrowdStrike filebeat module #182
Add CrowdStrike filebeat module #182
Conversation
Pinging @elastic/siem (Team:SIEM) |
Pinging @elastic/integrations (Team:Integrations) |
packages/crowdstrike/manifest.yml
Outdated
title: CrowdStrike SIEM Alerts | ||
size: 3360x1776 | ||
type: image/jpg | ||
- src: /img/siem-events-cs.jpg |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should this appear in the Kibana UI? It looks like it's only showing the first screenshot right now?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I noticed the same thing with Suricata. I kind of expected to be able to thumb through the screenshots.
4afcbf0
to
def0627
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
* Add crowdstrike filebeat module * Update crowdstrike module * Revert accidental removal * Update with changes to crowdstrike module * add back new samples * Update base fields * Update READMe * update owner * remove dataset fields and add in log and input fields * remove stray png
What does this PR do?
So, one of the things in the handlebars yaml file to bring it to parity with what's currently in filebeat is blocked by elastic/kibana#72698I'm going to try and actually test this locally as well, but I'm putting this up here early in case anyone wants to give early feedback.Checklist
Related issues
Screenshots