elastic/endpoint-package issues and pull requests

#100 - [7.10] Upgrading elastic-package (#99)

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago
Labels: backport

#99 - Upgrading elastic-package

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#98 - [7.10] Add file.extension and process.args_count to file events mapping (#97)

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago
Labels: backport

#97 - Add file.extension and process.args_count to file events mapping

Pull Request - State: closed - Opened by marshallmain almost 4 years ago

#96 - Add ransomware alert schema

Pull Request - State: closed - Opened by marshallmain almost 4 years ago - 1 comment

#95 - Adding 7.10 to backport script

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#94 - Update .backportrc.json during release

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#93 - Improve release process

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#92 - Doing some cleanup and commenting

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#91 - Fix pipeline directory

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#90 - [SECURITY_SOLUTION] rename endpoint package

Pull Request - State: closed - Opened by kevinlog almost 4 years ago

#89 - Rename changes and validation fixes

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#88 - Populate quesiton.type for dns events

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago - 8 comments

#87 - Adding in geo fields to fix maps page

Pull Request - State: closed - Opened by jonathan-buttner almost 4 years ago

#86 - 78024: move transform add template for index

Pull Request - State: closed - Opened by nnamdifrankie almost 4 years ago - 1 comment

#85 - Fix remote endpoint branch

Pull Request - State: closed - Opened by dmathieu about 4 years ago

#84 - [SECURITY_SOLUTION] remove transform due to another bug

Pull Request - State: closed - Opened by kevinlog about 4 years ago

#83 - Parse DNS Fields

Issue - State: closed - Opened by jonathan-buttner about 4 years ago - 3 comments
Labels: Team:Endpoint Data Visibility, 7.11 candidate, v7.10.0

#82 - Removing default github tickets

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#81 - add the transform file back

Pull Request - State: closed - Opened by kevinlog about 4 years ago
Labels: Team:Endpoint Management

#80 - [SECURITY_SOLUTION] remove transform in case we need to revert

Pull Request - State: closed - Opened by kevinlog about 4 years ago - 1 comment
Labels: Team:Endpoint Management

#79 - [Security Solution][Exceptions] Add lowercase normalized fields for case-insensitive matching

Pull Request - State: closed - Opened by madirey about 4 years ago - 5 comments
Labels: enhancement, Team:Endpoint Response, 7.10.0, Team:SIEM

#78 - Updating ECS version to 1.6.0

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: Team:Endpoint Data Visibility

#77 - [7.9] Copying the package to the right directory (#76)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#76 - Copying the package to the right directory

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#75 - INGEST-KB-75153: add transform

Pull Request - State: closed - Opened by nnamdifrankie about 4 years ago

#74 - [7.9] Improve the package release process (#73)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#73 - Improve the package release process

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: Team:Endpoint Data Visibility

#72 - [7.9] Adding header comments on missing files (#71)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#71 - Adding header comments on missing files

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#70 - Running elastic-package format

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#69 - [7.9] Adding prettierignore file (#68)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#68 - Adding prettierignore file

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#67 - [7.9] Using the elastic-package tool to format the endpoint package (#65)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#66 - [7.9] Add .text fields to exceptionable list (#50)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#65 - Using the elastic-package tool to format the endpoint package

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: Team:Endpoint Data Visibility

#64 - Adding python file header comments

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#63 - EMT-661: change case of host details element

Pull Request - State: closed - Opened by nnamdifrankie about 4 years ago

#62 - [7.9] adding github owner (#61)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#61 - adding github owner

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#60 - Open prs against the snapshot branch

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#59 - [7.9] Removing dataset fields (#58)

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: backport

#58 - Removing dataset fields

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#57 - Switch type to integration

Issue - State: closed - Opened by jonathan-buttner about 4 years ago - 1 comment
Labels: Team:Endpoint Data Visibility

#56 - Bump the kibana constraint

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#55 - Adding backport script

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#54 - Including branch name in the PR title

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#53 - EMT-661: add metadata current infrastructure

Pull Request - State: closed - Opened by nnamdifrankie about 4 years ago - 7 comments

#52 - Adding datastream fields

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#51 - Fix version number

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#50 - Add .text fields to exceptionable list

Pull Request - State: closed - Opened by marshallmain about 4 years ago - 2 comments

#49 - Adding geo pipeline for source and dest

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: Team:Endpoint Data Visibility

#48 - Adding paths to staging and snapshot

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#47 - Include agent fields for metrics

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago
Labels: Team:Endpoint Data Visibility

#46 - Adding pipeline and event.ingested field

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#45 - Readme script

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago - 2 comments

#44 - Adding security logo

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#43 - New icon

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#42 - Updating text for readme and manifest

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#41 - Removing dashboard from the package

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#40 - Using marshalls work, and latest ecs master, with a short description…

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#39 - Renaming telemetry to metrics

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#38 - Allow parallel builds and fixing manifest

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#37 - Fixing make and removing custom index patterns

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#36 - Update dashboard

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#35 - Removing dups and correcting version string

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#34 - Change target.dll.code_signature as well

Pull Request - State: closed - Opened by marshallmain about 4 years ago

#33 - Switch from default code_signature to nested

Pull Request - State: closed - Opened by marshallmain about 4 years ago

#32 - EMT-451: remove metadata mirror

Pull Request - State: closed - Opened by nnamdifrankie about 4 years ago

#31 - Disable dynamic mapping for all datasets

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#30 - Disable indexing on malware features and call stack

Pull Request - State: closed - Opened by marshallmain about 4 years ago

#29 - EMT-492: add event fields to metadata

Pull Request - State: closed - Opened by nnamdifrankie about 4 years ago

#28 - Installing script environment

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#27 - Switching id to name in manifests

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#26 - Renaming requirements to conditions

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#25 - Switch to production branch

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#24 - Temporary fix for double package issue

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#23 - Add exceptionable malware fields

Pull Request - State: closed - Opened by marshallmain about 4 years ago

#22 - Switching to config_templates

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#21 - Using docker to run the registry

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#20 - SECURITY-ENDPOINT: reconcile host.name and host.hostname

Pull Request - State: closed - Opened by nnamdifrankie about 4 years ago - 3 comments

#19 - EMT-295: add default input for endpoint package

Pull Request - State: closed - Opened by nnamdifrankie about 4 years ago - 6 comments

#18 - Update subsets to conform with new format

Pull Request - State: closed - Opened by marshallmain about 4 years ago

#17 - Removing old events datasets and removable field

Pull Request - State: closed - Opened by jonathan-buttner about 4 years ago

#16 - Add fields for file unquarantine message

Pull Request - State: closed - Opened by marshallmain about 4 years ago

#15 - EMT-451: add status field and metadata mirror index.

Pull Request - State: closed - Opened by nnamdifrankie over 4 years ago

#14 - Using top level dataset

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

#13 - New event indices

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

#12 - Use Encoded dashboards

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

#11 - Updating the package requirements to only work for 7.9

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

#10 - EMT-401: add policy applied to malware event

Pull Request - State: closed - Opened by nnamdifrankie over 4 years ago

#9 - Align event and alert schema designs

Pull Request - State: closed - Opened by marshallmain over 4 years ago - 30 comments

#8 - Align event and alert schemas

Issue - State: closed - Opened by marshallmain over 4 years ago - 4 comments

#7 - Rename endpoint.event.process.ancestry to align with ECS

Issue - State: closed - Opened by marshallmain over 4 years ago - 3 comments

#6 - Adding dataset fields

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

#5 - Moving system fields to metrics for telemetry and disabling disks

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

#4 - EMT-401: add policy details to endpoint, add name to policy details

Pull Request - State: closed - Opened by nnamdifrankie over 4 years ago - 6 comments

#3 - Adding required base fields

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

#2 - Regenerating the package fields.yml with enabled

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago - 2 comments
Labels: Team:Endpoint Data Visibility

#1 - Removing some scripts

Pull Request - State: closed - Opened by jonathan-buttner over 4 years ago

GitHub / elastic/endpoint-package issues and pull requests