OTRF / OSSEM

Open Source Security Events Metadata (OSSEM)

OTRF/OSSEM Issues

`event_category_type` is duplicated (?)
Updated 2 years ago
Update OSSEM CDM source, destination or target guideline
Closed 2 years ago
Issue on page /cdm/entities/device.html
Updated 3 years ago
a few new fields for models and an entity
Updated 3 years ago
Sysmon data dictionaries compliant with entities
Closed 3 years ago2
Validating content within OSSEM sub-repos
Closed 3 years ago1
Remove column 'field name' from CIM
Closed 3 years ago2
Can we standardize on ISO 8601 for all date formats where applicable?
Closed 3 years ago1
CIM - References Sections
Closed 3 years ago2
Upated sysmon parser script to fix issue reported on Sentinel Github
Closed 3 years ago2
Typographical Error
Closed 3 years ago1
Creating a Sub-Repo for Data Dictionaries
Closed 3 years ago1
Picking initial entities for reviewing OSEEM Ontology
Updated 3 years ago1
Question: Defining Data Models as Ontologies
Closed 3 years ago2
Extending data dictionaries?
Updated 3 years ago3
Data dictionaries for the cowrie honeypot
Closed 4 years ago2
WMI fields mismatch between sysmon events and built in wmi events
Closed 4 years ago
Entities for scheduled tasks and services?
Updated 4 years ago2
CDM vs data dictionaries - what's the "source of truth" in cases of mismatch?
Closed 4 years ago2
Issue on page /cdm/entities/destination_nat.html
Updated 4 years ago2
Windows Security logs, fields mismatch for Object Access
Updated 4 years ago1
Windows Security logs, Computer Account Management auditing fields mismatch between events
Updated 4 years ago1
Add event 'version' field to the data dictionary schema
Closed 4 years ago5
DATA DICTIONARY - Sorting Event IDs on MD tables
Closed 4 years ago1
CIM - skip empty YAML files while creating MD files
Closed 4 years ago2
Create guideline on how to operate ossem_converter.py
Updated 4 years ago
Thoughts about Elastic Common Schema (ECS)
Closed 4 years ago3
Questions on ossem_converter to convert markdown to yaml
Closed 4 years ago3
Why two object types: "win registry" and "registry"?
Closed 4 years ago1
Yaml entries
Closed 4 years ago2
Feedback based on usage in Grapl
Updated 5 years ago3
Translation sheet
Closed 5 years ago3
Windows Security 5145: Missing Field Names and title is wrong
Closed 5 years ago1
PowerShell 4104 matching HELK
Updated 5 years ago
Detection data model and required data fields
Updated 5 years ago1
EventType missing from event_id 17/18
Closed 5 years ago1
Add MAC addresses to the Common Information Model
Closed 5 years ago2
Sysmon data dictionary Update
Closed 5 years ago1
suggested additions to file CIM
Closed 5 years ago1