Arnold van Wijnbergen

Support for running Sysmon from CLI/interactive inside a container or AKS cluster

2

Sysmon helps to extract a lot of information using EBPF. This also could work inside your Kubernetes (AKS Support) cluster. Currently the blocking issue is that we need to install...

Is there a possibility to change to OUTPUT file to a custom /var/log destination

10

Is there a possibility to change to OUTPUT file to a custom /var/log destination ? In some cases you want to use for example /var/log/sysmon instead of the standard syslog,...

Possibility to restore single objects (like a dashboard) from a TAR file to an environment

2

Hi, Just curious if this functionality is available. I couldn't see this. In our use case we also need to be able to restore single dashboard (using the dashboard file...

File to output capture to Blob storage using Blob SAS URL "Failed to validate blob url" and "Failed to output network traffic"

2

**Describe the bug** Maybe doing things wrong here, but the capture isn't uploaded to the SAS URL. Seems to be complaining. Followed the [documentation](https://retina.sh/docs/captures/). Seems to be a little bit...

can't build binary by make install-kubectl-retina no rule to make target

2

**Describe the bug** Can't build binary as described in the [documentation](https://retina.sh/docs/installation/cli). Seems missing in Makefile make install-kubectl-retina **To Reproduce** Steps to reproduce the behavior: git clone https://github.com/microsoft/retina.git make install-kubectl-retina make:...

Latest released version 0.11.0 fails to instantiate provider "registry.terraform.io/elastic/ec" to obtain schema: fork/exec on Windows operating system

1

## Readiness Checklist - [X] I am running the latest version ==> Tried terraform v1.9.5 and older v1.4.7. - [X] I checked the documentation and found no answer ==> Followed...

Initial Solution Package for NCSC-NL integration

8

Change(s): - New Solution for exchanging / sharing Threat Intelligence using a Playbook from Microsoft Sentinel to a TAXII Server. this is build in collaboration with both Microsoft NL and...

Introduce malicious LLM Prompts to STIX Standard as Observable Object to be used as Indicator pattern for IOCs

3

Using this PR I like to propose the discussion introducing LLM Prompts as pattern type for Indicators. Many domain experts see the growth of evil prompts. From solely LLM, MCP...