All pull requests

Pull requests

• Map Agentmetry shell calls from recorded tool names

  #225·blitzcrieg1 opened Nov 6, 2026Contributor·

  ·
  7

• Declare that ismalicious uses stix

  #220·jachris opened Nov 4, 2026Contributor·

  ·
  2

• Split VPC mapping snapshots into focused cases

  #219·zedoraps opened Nov 4, 2026Contributor·

  ·
  2

• Preserve Okta identities and source context in OCSF

  #218·zedoraps opened Nov 4, 2026Contributor·

  ·
  2

• Validate Suricata mappings with OCSF functions

  #217·zedoraps opened Nov 4, 2026Contributor·

  ·
  2

• Preserve Zeek context with OCSF functions

  #216·zedoraps opened Nov 4, 2026Contributor·

  ·
  2

• Validate Agentmetry mappings with OCSF functions

  #214·zedoraps opened Nov 4, 2026Contributor·

  ·
  2

• Validate demo sources and full OCSF captures

  #210·zedoraps opened Oct 28, 2026Contributor·

  ·
  2

• Correct Windows OCSF event semantics

  #209·zedoraps opened Oct 28, 2026Contributor·

  ·
  2

• Add ocsf_generate workload package

  #207·zedoraps opened Oct 27, 2026Contributor·

  ·

• Populate required OCSF 1.9 attributes in OpenSSH and Suricata mappings

  #205·zedoraps opened Oct 20, 2026Contributor·

  ·
  2

• Correct Windows OCSF mappings

  #183·zedoraps opened Aug 29, 2026Contributor·

  ·

• Add Cisco Secure Firewall ASA support

  #162·zedoraps opened Jun 22, 2026Contributor·

  ·
  4

• Add Cisco ISE syslog parsing and OCSF mapping

  #161·zedoraps opened Jun 22, 2026Contributor·

  ·
  1