{"push_id":1103153030,"size":9,"distinct_size":0,"ref":"refs/heads/Netflow","head":"e5f1d148c062c9d85501d5b6fa32ce4d08fa4a5c","before":"2c818d1c9a6d91c2ae6a0493541b1a46c151df2f","commits":[{"sha":"9d446ba4a379c4dab82b56e522a2c28efcdce36f","author":{"email":"67e0e22adfd1036a72edf2867bb840d611d97236@svetlov.org","name":"dsvetlov"},"message":"Add GeoIP for Alert.Source and Alert.Target","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/9d446ba4a379c4dab82b56e522a2c28efcdce36f"},{"sha":"2b99ad29fc189f9fda6d3fa73d8b2b63cf376918","author":{"email":"67e0e22adfd1036a72edf2867bb840d611d97236@svetlov.org","name":"dsvetlov"},"message":"Add DNS PTR lookups for Alert.Source.Address and Alert.Target.Address","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/2b99ad29fc189f9fda6d3fa73d8b2b63cf376918"},{"sha":"087247847676c9f6b93b948effa1f22cf3501a30","author":{"email":"67e0e22adfd1036a72edf2867bb840d611d97236@svetlov.org","name":"dsvetlov"},"message":"Fix for DNS PTR lookups and GeoIP for Alert.Source.Address and Alert.Target.Address","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/087247847676c9f6b93b948effa1f22cf3501a30"},{"sha":"3c8b8ce0faa01273955b544d9e37d97259a86cdc","author":{"email":"67e0e22adfd1036a72edf2867bb840d611d97236@svetlov.org","name":"dsvetlov"},"message":"Try to fix playbook","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/3c8b8ce0faa01273955b544d9e37d97259a86cdc"},{"sha":"64bbaeb31d7c02a3dc81e4f599407c2131950d41","author":{"email":"67e0e22adfd1036a72edf2867bb840d611d97236@svetlov.org","name":"dsvetlov"},"message":"Fix conflict","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/64bbaeb31d7c02a3dc81e4f599407c2131950d41"},{"sha":"db8433ebad2234f9318f48e771ac25d1b836751e","author":{"email":"67e0e22adfd1036a72edf2867bb840d611d97236@svetlov.org","name":"dsvetlov"},"message":"Merged with ossec branch","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/db8433ebad2234f9318f48e771ac25d1b836751e"},{"sha":"4c96a52a19a6be952f2c585bd72d8767299a8a1a","author":{"email":"453601b120cbf3e7a49a9b44e741561ad884d199@users.noreply.github.com","name":"dsvetlov"},"message":"Merging ossec branch into main (#45)\n\n* ossec (#41)\r\n\r\n* Update 20-ossec.conf\r\n\r\n* Added files via upload\r\n\r\n* new_ossec_pattern\r\n\r\n* Update 20-ossec.conf\r\n\r\n* Add User:%{GREEDYDATA::[Alert][User]}for (no user)\r\n\r\n* Create filebeat.yml\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n* Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n*  Try to fix tests\r\n\r\n* ossec test (#44)\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Edit OSSEC_MESSAGE_FULL_SYSCHECK\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* 123\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_DIFF.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_DIFF.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_DIFF.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec.pattern\r\n\r\n* Create OSSEC_MESSAGE_FULL_SYSCHECK_DELETE.yaml\r\n\r\n* Rename OSSEC_MESSAGE_FULL_SYSCHECK_DELETE.yaml to ossec_MESSAGE_FULL_SYSCHECK_DELETE1.yaml\r\n\r\n* Create ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL.yaml\r\n\r\n* Create ossec-OSSEC_MESSAGE_FULL_HKLM.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_HKLM.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_HKLM.yaml","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/4c96a52a19a6be952f2c585bd72d8767299a8a1a"},{"sha":"e858fbe0c305af559abf5b888f42e905c8d77cdd","author":{"email":"2ecce898b30b85bcf9b82957aba30ef354cd3004@gmail.com","name":"alienjolka"},"message":"Edit fields (#46)\n\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_HKLM.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE2.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE_MESSAGE.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE_USER.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_USR_MSG.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec.pattern\r\n\r\n* Create ossec-OSSEC_MESSAGE_FULL_NO_USER.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_HKLM.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE3.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_NO_USER.yaml","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/e858fbe0c305af559abf5b888f42e905c8d77cdd"},{"sha":"e5f1d148c062c9d85501d5b6fa32ce4d08fa4a5c","author":{"email":"2ecce898b30b85bcf9b82957aba30ef354cd3004@gmail.com","name":"alienjolka"},"message":"Edit test (#47)\n\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_HKLM.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE2.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE_MESSAGE.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE_USER.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_USR_MSG.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec.pattern\r\n\r\n* Create ossec-OSSEC_MESSAGE_FULL_NO_USER.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_HKLM.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_LINE3.yaml\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_READD_FULL.yaml\r\n\r\n* Update ossec.pattern\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_NO_USER.yaml\r\n\r\n* [Alert][Analyzer][OSSEC][Diff]\r\n\r\n* [Alert][Analyzer][OSSEC][Diff]\r\n\r\n* Update ossec-OSSEC_MESSAGE_AGENTLESS_MESSAGE.yaml\r\n\r\n* [Alert][Analyzer][OSSEC][Diff]\r\n\r\n* Update ossec-OSSEC_MESSAGE_FULL_SYSCHECK_DIFF.yaml\r\n\r\n* [Alert][Analyzer][OSSEC][Diff]\r\n\r\n* Update ossec.pattern","distinct":false,"url":"https://api.github.com/repos/dsvetlov/lightsiem/commits/e5f1d148c062c9d85501d5b6fa32ce4d08fa4a5c"}]}