search

Security-Onion-Solutions / securityonion

Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
https://securityonion.net
3.25k stars 503 forks source link

FEATURE: Add Events table columns for event.module kratos #12740

Closed dougburks closed 7 months ago

dougburks commented 7 months ago

As a defender, I need Events table columns for event.module kratos:

      ':kratos:':
        - soc_timestamp
        - http_request.headers.x-real-ip
        - identity_id
        - http_request.headers.user-agent
        - event.dataset
        - msg
dougburks commented 7 months ago

Tested and verified: image