Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Completes integration of kubernetes pipeline #68

Merged
merged 1 commit into from
Aug 26, 2024
Merged

Completes integration of kubernetes pipeline #68

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,7 @@ Further, it contains the following processing pipelines in `sigma.pipelines.elas
* ecs_zeek_beats in zeek submodule: Zeek ECS mapping from Elastic.
* ecs_zeek_corelight in zeek submodule: Zeek ECS mapping from Corelight.
* zeek_raw in zeek submodule: Zeek raw JSON log field naming.
* ecs_kubernetes in kubernetes submodule: ECS mapping for Kubernetes audit logs ingested with Kubernetes integration

This backend is currently maintained by:

Expand Down
2 changes: 2 additions & 0 deletions sigma/pipelines/elasticsearch/__init__.py
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
from .windows import ecs_windows, ecs_windows_old
from .zeek import ecs_zeek_beats, ecs_zeek_corelight, zeek_raw
from .kubernetes import ecs_kubernetes

pipelines = {
"ecs_windows": ecs_windows,
"ecs_windows_old": ecs_windows_old,
"ecs_zeek_beats": ecs_zeek_beats,
"ecs_zeek_corelight": ecs_zeek_corelight,
"zeek": zeek_raw,
"ecs_kubernetes": ecs_kubernetes,
}