AlexAkulov

[Tt]emp/
[Oo]bj/
[Bb]uild
/[Bb]uilds/
/[Ll]ibrary/
sysinfo.txt
*.stackdump
/Assets/AssetStoreTools*
*.apk
*.unitypackage

AlexAkulov

input {
    syslog {
        port => {{ bitfan_syslogd_port }}
        protocol => "udp"
        type => "syslog"
    }
}
filter {
    kv {
        field_split => "\\t"

AlexAkulov

#
# spec file for package Bro
#
# Copyright (c) 1995-2014 The Regents of the University of California
# through the Lawrence Berkeley National Laboratory and the
# International Computer Science Institute. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions are met:
#

AlexAkulov

CREATE TABLE wssg.sysmon_logs_local ( Date Date, TimeStamp DateTime, ComputerName String, EventId UInt8, Task String, DstHost String, DstIp String, DstPort UInt16, DstPortName String, Image String, ProcessGuid String, ProcessId UInt32, Proto String, SrcHost String, SrcIp String, SrcPort UInt16, User String, CommandLine String, Company String, CurrentDirectory String, Description String, FileVersion String, Hashes String, IntegrityLevel String, LogonGuid String, LogonId String, ParentCommandLine String, ParentImage String, ParentProcessGuid String, ParentProcessId UInt32, Product String, TerminalSessionId UInt32, EventType String, TargetObject String, Details String, SourceImage String, SourceProcessGuid String, SourceProcessId String, StartAddress String, StartModule String, TargetImage String, TargetProcessGuid String, TargetProcessId UInt32, ImageLoaded String, Signature String, SignatureStatus String, Signed String, ConfigurationFileHash String, Configuration String, FileCreate String, TargetFilename Strin

AlexAkulov

# coding=utf-8

"""
Simple collector which get JSON and parse it into flat metrics

#### Dependencies

 * urllib2

"""

AlexAkulov

Host *
  ForwardAgent yes
  AddKeysToAgent yes
  KeepAlive yes
  ServerAliveInterval 60
  ControlMaster auto
  ControlPath ~/.ssh/sockets/%r@%h-%p
  ControlPersist 600

# Host *.example.com