Open Source Security Event Metadata ! Data engineers! #ThreatHunting @OTR_Community
Joined September 2019
- Tweets31
- Following7
- Followers1.5K
- Likes40
🚀 Any NEW fields on the schemas for #SysmonForLinux events compared to Windows🤔?
@Cyb3rPandaH used our #Sysmon for Windows & Linux data dictionaries in a python 🐍 script to answer that😎
✅ ParentUser (ProcessCreate)
✅ User (EID 5,9,11)
🖇️ Script: github.com/OTRF/OSSEM-DD/blo…
🚨 Learning how to install #Sysmon for Linux 🐧 & send security events to #AzureSentinel in a research lab environment!! 🧪 #MSTIC #Microsoft
📡 Sysmon (SysinternalsEBPF) -> Syslog -> SIEM 🚀
✅ Scripts
✅ ARM templates
✅ Sysmon configs and more..
techcommunity.microsoft.com/…
Thinking about contributing to an os project during the holidays? 😉The @OTR_Community have updated our Detection Model
1⃣Contribute security events to @MITREattack data sources github.com/OTRF/OSSEM-DM/tre…
2⃣Provide feedback github.com/OTRF/OSSEM-DM/blo…
3⃣Have fun ossemproject.com/notebooks/d…
This Post is from an account that no longer exists. Learn more
Formalizing the mapping of security events to the @MITREattack data source objects concepts 🍻 We would love to hear your feedback and see your contributions to this community-led effort!! 💜 Thank you @Cyb3rPandaH 💜
Blog: medium.com/threat-hunters-fo…
