Skip to content

/ ecs

New pull request New
34 Open 723 Closed
34 Open 723 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels.
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀
Document basic data type usage in ECS
#1173 opened Dec 4, 2020 by ebeahan • Draft
@ebeahan
[1.x] 6.x index template data type fallback (#1171)
backport
#1172 opened Dec 4, 2020 by ebeahan • Approved
Add ssdeep hash
enhancement
#1169 opened Dec 4, 2020 by andrewstucki • Review required
1
Added Confidence Rating to ECS
#1160 opened Dec 1, 2020 by secops4thewin • Review required
3
Add composable index templates artifacts
1.7 needs_backport ready
#1156 opened Nov 26, 2020 by webmat • Review required
1
@webmat
4
[RFC] wip: data_stream - stage 2
1.8.0 RFC
#1145 opened Nov 23, 2020 by roncohen • Review required
@ruflin
4
Add parent.id to the tracing field set
#1142 opened Nov 19, 2020 by sgryphon • Review required
Expanded documentation for tracing fields
1.7.0 1.8.0 needs_backport ready
#1128 opened Nov 17, 2020 by sgryphon • Review required
9
[RFC] Threat Intel - Stage 2
1.8.0 RFC
#1127 opened Nov 16, 2020 by shimonmodi • Review required
47
Stage 3 changes for wildcard RFC 0001
1.8.0 1.x needs_backport ready
#1098 opened Nov 5, 2020 by ebeahan • Review required 6 of 7
@ebeahan
5
File.macho create
1.9.0 RFC
#1097 opened Nov 5, 2020 by peasead • Review required
1
@peasead
11
File.elf create
1.9.0 RFC
#1077 opened Nov 4, 2020 by peasead • Review required
1
@peasead
5
Extend file.pe Fieldset
1.9.0 RFC
#1071 opened Nov 3, 2020 by peasead • Review required
1
@peasead
54
[RFC] Service Environment Field - stage 1
1.9.0 RFC
#1070 opened Nov 3, 2020 by cyrille-leclerc • Review required
24
Remove beta warning label from categorization fields docs
1.8.0 1.x documentation needs_backport ready
#1067 opened Oct 30, 2020 by ebeahan • Draft
@ebeahan
Changes related to merging RFC 0007 at stage 3
1.8.0 1.x needs_backport ready
#1066 opened Oct 30, 2020 by webmat • Review required 8 of 9
@webmat
27
Adds container.is_vulnerable
review
#1032 opened Oct 16, 2020 by robgil • Review required
7
Merge custom and core multi_fields array
Feature: ECS enhancement review
#982 opened Sep 29, 2020 by jonathan-buttner • Review required
12
Add related.event field
RFC:candidate ready
#968 opened Sep 14, 2020 by mbrancato • Review required
2
[RFC] Data Source Categorization Fields
RFC
#958 opened Aug 27, 2020 by jamiehynds • Review required
23
[RFC] Session RFC PR to move to Stage 2 (Draft)
1.8.0 RFC
#935 opened Aug 17, 2020 by dainperkins • Review required 0 of 5
35
Fix up generated go code for arrays
wontfix
#872 opened Jun 18, 2020 by andrewstucki • Review required
1
Add x509 to code_signature
discuss
#852 opened May 15, 2020 by andrewstucki • Approved
@webmat
5
ip address locality
discuss
#844 opened May 11, 2020 by dainok • Review required
7
Incorporating IPFIX/Netflow fields into existing ECS field sets
RFC:candidate review
#732 opened Jan 24, 2020 by jdburche • Review required
13
ProTip! Mix and match filters to narrow down what you’re looking for.
You can’t perform that action at this time.