Skip to content

Commit

Permalink
Merge pull request #1522 from SEKOIA-IO/update-intake-documentation
Browse files Browse the repository at this point in the history
Refresh intakes documentation
  • Loading branch information
squioc authored Jan 8, 2024
2 parents 60ed8cf + e058ab6 commit b140f43
Showing 1 changed file with 16 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -44,6 +44,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "23003137",
"kind": "event",
"outcome": "success",
"severity": 8,
"type": [
"info"
Expand All @@ -52,6 +53,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2012-10-04T13:15:29Z",
"action": {
"name": "Accept",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down Expand Up @@ -123,6 +125,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "Bad TCP checksum",
"kind": "event",
"outcome": "success",
"severity": 8,
"type": [
"info"
Expand All @@ -131,6 +134,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2012-11-08T17:58:02Z",
"action": {
"name": "Drop",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down Expand Up @@ -193,6 +197,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "23003139",
"kind": "event",
"outcome": "success",
"severity": 8,
"type": [
"info"
Expand All @@ -201,6 +206,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2012-10-12T13:29:24Z",
"action": {
"name": "Drop",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down Expand Up @@ -511,6 +517,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "Active mode",
"kind": "alert",
"outcome": "success",
"reason": "port/sendport 10,3,0,33,7,223",
"severity": 5,
"type": [
Expand All @@ -519,6 +526,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"action": {
"name": "alerted",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down Expand Up @@ -581,6 +589,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "FTP commands",
"kind": "alert",
"outcome": "success",
"reason": "nlist/mls",
"severity": 5,
"type": [
Expand All @@ -589,6 +598,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
},
"action": {
"name": "alerted",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down Expand Up @@ -651,6 +661,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "Successful Request",
"kind": "event",
"outcome": "success",
"severity": 2,
"type": [
"info"
Expand All @@ -659,6 +670,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2012-09-19T13:35:00Z",
"action": {
"name": "passed",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down Expand Up @@ -1128,6 +1140,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "Successful Request",
"kind": "event",
"outcome": "success",
"severity": 2,
"type": [
"info"
Expand All @@ -1136,6 +1149,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2021-03-15T15:21:22Z",
"action": {
"name": "passed",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down Expand Up @@ -1225,6 +1239,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
],
"code": "200021069",
"kind": "event",
"outcome": "success",
"severity": 5,
"type": [
"info"
Expand All @@ -1233,6 +1248,7 @@ Find below few samples of events and how they are normalized by Sekoia.io.
"@timestamp": "2012-09-19T13:53:33Z",
"action": {
"name": "blocked",
"outcome": "success",
"target": "network-traffic"
},
"destination": {
Expand Down

0 comments on commit b140f43

Please sign in to comment.