counteractive/o365beat issues and pull requests

#60 - Log file is not getting created

Issue - State: open - Opened by sriramb12 over 2 years ago

#59 - Does O365beat support multiple Office 365 tenants scenario

Issue - State: open - Opened by khaloud40 almost 3 years ago

#58 - Tenant ID not found

Issue - State: open - Opened by shad0wcrawl3r over 3 years ago

#57 - GCC High no available content locations:

Issue - State: open - Opened by mgovolt over 3 years ago - 1 comment

#56 - Log content changed recently?

Issue - State: open - Opened by GenCr about 4 years ago

#55 - AzureActiveDirectory Logs not pulled

Issue - State: open - Opened by andy13th over 4 years ago - 3 comments

#54 - Certificate signed by unknown authority message

Issue - State: open - Opened by robm82 over 4 years ago - 2 comments

#53 - Proxy support for the API requests

Issue - State: closed - Opened by kristofver over 4 years ago - 1 comment

#52 - added certificate authentication functionality

Pull Request - State: closed - Opened by yanpeng7 over 4 years ago

#51 - Live Realoding Credentials

Issue - State: closed - Opened by cloudziu over 4 years ago - 2 comments
Labels: enhancement

#50 - test

Pull Request - State: open - Opened by Reshadadada over 4 years ago

#49 - first test pull request

Pull Request - State: closed - Opened by Reshadadada over 4 years ago

#48 - added name to contributor on humans.txt

Pull Request - State: closed - Opened by mahotosasaki over 4 years ago

#47 - WARN beater/o365beat.go:249 start XX must be <=YY hrs ago, resetting

Issue - State: open - Opened by rob570 over 4 years ago - 3 comments
Labels: bug

#46 - o365 audit.exchange not returning threat audit logs

Issue - State: closed - Opened by asadzz over 4 years ago - 3 comments

#45 - Logstash connection errors

Issue - State: closed - Opened by GenCr over 4 years ago - 7 comments

#44 - Organization.id

Pull Request - State: open - Opened by jthack almost 5 years ago

#43 - Dashboard and visualizations not working - error with fields.keyword

Issue - State: closed - Opened by Rajprince2793 almost 5 years ago - 5 comments

#42 - Preventing Duplicate Events

Issue - State: open - Opened by shwetas-syd almost 5 years ago - 4 comments
Labels: bug

#41 - Parsing Extended Properties

Issue - State: closed - Opened by ion-storm almost 5 years ago - 4 comments

#40 - Docker Instructions

Issue - State: closed - Opened by BenB196 almost 5 years ago - 3 comments
Labels: good first issue

#39 - Client.Timeout for Exchange/General/Sharepoint

Issue - State: closed - Opened by kevinserafin almost 5 years ago - 6 comments

#38 - visualization not working

Issue - State: closed - Opened by CVMCTONY almost 5 years ago - 5 comments

#37 - Understanding Authentication Data

Issue - State: closed - Opened by Von-dy almost 5 years ago - 4 comments

#36 - Exiting: error loading config file: yaml: line 2: did not find expected node content

Issue - State: closed - Opened by leogoldim almost 5 years ago - 5 comments

#35 - User Data Enhancement

Issue - State: closed - Opened by Michael-vdL about 5 years ago - 3 comments

#34 - future request Azure Beats

Issue - State: closed - Opened by creatoni4 about 5 years ago - 4 comments
Labels: enhancement

#33 - Support client certificate/public key authentication

Issue - State: closed - Opened by chris-counteractive about 5 years ago - 2 comments
Labels: enhancement

#32 - SIGABRT during `make release` packaging

Issue - State: closed - Opened by chris-counteractive about 5 years ago - 3 comments

#31 - Certain events don't trigger the dissect processor

Issue - State: closed - Opened by GenCr about 5 years ago - 5 comments

#30 - Index pattern doesn't change

Issue - State: closed - Opened by ebvjr about 5 years ago - 5 comments

#29 - Killing the beat process from the command line is unreliable

Issue - State: closed - Opened by chris-counteractive about 5 years ago - 2 comments

#28 - Incorrect file name on o365beat-1.4.3-x86_64.rpm.sha512

Issue - State: open - Opened by ephemeraldrive about 5 years ago - 1 comment

#27 - Error parsing Audit.AzureActiveDirectory (other content types work fine)

Issue - State: closed - Opened by jheidecker about 5 years ago - 3 comments

#26 - Question about possibility of monitoring multiple tenant domains

Issue - State: open - Opened by ipninichuck about 5 years ago - 14 comments
Labels: enhancement

#25 - GCC High - Endpoint Used Returning no data

Issue - State: closed - Opened by cyanitol about 5 years ago - 5 comments
Labels: enhancement

#24 - Question regarding installing other modules on o365beat

Issue - State: closed - Opened by ipninichuck about 5 years ago - 3 comments
Labels: question

#23 - Cannot index event

Issue - State: closed - Opened by nealmadhu about 5 years ago - 2 comments

#22 - Incorrect system time can lead to failed requests

Issue - State: closed - Opened by chris-counteractive about 5 years ago - 1 comment

#21 - Response body not printed for authentication errors which hinders debugging.

Issue - State: closed - Opened by chris-counteractive about 5 years ago - 4 comments

#20 - How to use debugging output enabled on Centos7

Issue - State: closed - Opened by sebastianfon94 about 5 years ago

#19 - Error Parsing @timestamp

Issue - State: closed - Opened by Z3r01mPact about 5 years ago - 4 comments

#18 - [ModifiedProperties] Can't get text on a START_OBJECT

Issue - State: closed - Opened by borg333 about 5 years ago - 3 comments

#17 - Publisher ID is not set

Issue - State: closed - Opened by jjkoster about 5 years ago - 9 comments
Labels: bug

#16 - ClientIP not parsed to ECS client.ip when it has port but no brackets

Issue - State: closed - Opened by chris-counteractive about 5 years ago - 1 comment

#15 - object mapping for [ModifiedProperties]

Issue - State: closed - Opened by borg333 about 5 years ago - 3 comments

#14 - ModifiedProperties field is sent as object which causes problems for elasticsearch

Issue - State: closed - Opened by chris-counteractive about 5 years ago

#13 - ECS event.severity is type long, whereas O365 Severity is a string

Issue - State: closed - Opened by chris-counteractive about 5 years ago
Labels: bug

#12 - ClientIP real-world values don't match ip data type in fields.yml, causing errors in elasticsearch parsing

Issue - State: closed - Opened by chris-counteractive about 5 years ago
Labels: bug

#11 - beat keystore possibiity

Issue - State: closed - Opened by ipninichuck about 5 years ago - 3 comments
Labels: enhancement

#10 - `make release` names package files with libbeat version rather than beat version

Issue - State: open - Opened by chris-counteractive about 5 years ago
Labels: bug

#9 - Config template "processors" section shadows custom ECS processors

Issue - State: closed - Opened by chris-counteractive about 5 years ago - 3 comments
Labels: bug

#8 - Vendor field not correctly set, which caused failed tests during `make release`

Issue - State: closed - Opened by chris-counteractive about 5 years ago

#7 - Remove duplicate processor from o365beat.yml

Pull Request - State: closed - Opened by SecBear over 5 years ago - 2 comments

#6 - ECS filter doesn't correctly parse ClientIP fields that have unusual format (like in Exchange events)

Issue - State: closed - Opened by chris-counteractive over 5 years ago

#5 - Beat doesn't detect when auditing is disabled (and docs don't emphasize it's necessary)

Issue - State: closed - Opened by chris-counteractive over 5 years ago

#4 - Auto-subscribe functionality doesn't work with empty subscription list

Issue - State: closed - Opened by chris-counteractive over 5 years ago - 1 comment

#3 - 401 Response

Issue - State: closed - Opened by themarcusaurelius over 5 years ago - 5 comments
Labels: question

#2 - o365beat-registry.json?

Issue - State: closed - Opened by awataszko over 5 years ago - 1 comment

#1 - Instructions on Configurating Azure AD Permissions

Issue - State: closed - Opened by ion-storm over 5 years ago - 1 comment

GitHub / counteractive/o365beat issues and pull requests